(IDG 


enet 


NEWSPAPER 


) 


FOILING FRAUD 


Online, no one knows you're a fraud. 


Or do they? Page 40 


NO MORE PRIVACY 


Technology is changing us so completely, 
personal privacy may be dying. Page 58 


SILICON WHAT? 


Silicon Mesa, Silicon Schmesa. Don’t buy every 
hokey high-tech nickname you hear. Page 44 
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SUSPICIOUS 
SERVER PROBES 
MULTIPLY 





Experts warn that more sophisticated 


hacks of vulnerable networks are coming | 


BY DAN VERTON 

The number of 
probes and scans designed to 
find vulnerable domain name 
servers on corporate networks 
shot up 280% last 


suspicious 


| locate vulnerable domain name 
servers across corporate net- | 


works. Pilot collected the infor- 


mation for the survey from its | 
operations | 
centers, which mon- | 


regional network 





month and contin- 
ues to climb, ac- 
cording to IT man- 
agers and a new survey con- 


ducted by a network security | 


monitoring firm. 


by Alameda, Calif.-based Pilot 
Network Services Inc. found 


that suspected hackers made as | 


many as 6,000 attempts last 


month — compared to approxi- | 
2,200 in December — to | 


mately 


rate networks be- 
longing to Pilot cli- 
ents worldwide. 


; 


The spike in the number of 
| scans came as no surprise to 
A survey released last week | 


many users and security ex- 
perts, 
stepping up their efforts to un- 


cover corporate systems that | 
haven’t been fixed for vulnera- | 
bilities discovered last month | 

Server Probes, page 73 | 








AIRPORTS GROUND 
USE OF WIRELESS 


Safety, loss of income 


BY BOB BREWIN 


Airport operators already con- | 
| al Airport earlier this year de- 


trol the airspace in their re- 


gions. Now they want the air- | 

| wireless installations, until it 
fashington Inter- | 
business strategy. BWI hasn’t 
Wireless, page 14 | 


waves, too. 
Baltimore/W 

national Airport last week be- 

came the latest airport to clamp 


down on the public wireless | 
LAN industry as well as on cel- | 
lular carriers that operate on | 


airport turf. Their concern: 


| wireless interference with oth- | 


er systems, but also a decline in 


| Pay-phone revenue that has 
from pay phones cited | 


| for ways to seek income from 


prompted some airports to look 


wireless technology. 
Seattle-Tacoma Internation- 


clared a 90-day moratorium on 


can develop a regulatory and 
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itor 70,000 corpo- | 


who said hackers are | 





| operating system, but the ma- 
| jority of corporate users won't 
| finish or even start the lengthy 
| and complex adoption of the | 
| last one, Windows 2000, until | 
| later this year. 


Windows 
| high marks among early | 


SCOTT NEWTON, IT director 
at baked-goods company 
Otis Spunkmeyer, saw a 
dramatic drop in laptop sup- 
port problems after Win- 
dows 2000 was installed. 


i i! 
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Could it be the end of the “blue screen 
of death”? Early users of Microsoft’s Win- 
dows 2000 Professional and Server editions 


say both are stable and reliable — 


a major ac- 


complishment. But a year after the operating 


system’s release, Robert L. Mitchell reports 


that implementing Active Directory is still a 


daunting task. 


BIG PUSH TO WIN 2K EXPECTED IN'O1 


Firms dragged l feet on 
OS during its first year 

BY CAROL SLIWA 

Microsoft Corp. last week offi- | 

cially unveiled a new Windows 





A year after its release, 
2000 is scoring 





adopters for stability, reliability 


and performance. But a Com- | 
puterworld poll of more than a 

dozen user groups and a review 
| of various analyst studies show 


that most companies, both 
large and small, haven’t been 


rushing to change due to cost | 


considerations, complexity, lack 


of trained staff and reliability 


concerns they hope will be alle- 
viated as the product matures. 


“We still speak with a lot of 


enterprises [that] are just start- 
ing testing phases 
Windows 2000, page 16 


Story begins on page 18. 


Why the Wait 


Reasons for delaying instal- 
lations of Active Directory: 


> Complexity 
> Lack of trained IT staff 


> Problems during pilot 
testing 


> Advanced management 
and design limitations of 
the 1.0 release of Windows 
2000 





and are | 
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ride the light 


Qwest 


Why settle for hot air? Qwest Dedicated Internet Access gives you 


network access via one of the world’s most advanced fiber-optic backbones. 


Not all networks are built the same. 


One company with all the answers. 


Results, not promises. 


qwest.com 1 800 RIDE QWEST 
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Real-Time at: 
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When lt Comes To Security, 
Only eTrust Can 
Protect You Like This. 


* Unfortunately, in the race to become And eTrust can be implemented one function at a 


Web-enabled, security has elena back seat time or all at once — it’s your choice 


; li IT managers often give themselves a false sense And since eTrust is 1 the Unicenter TNG® 
a of security with a standalone or partial security Framework.” it lets you snap-in other eBusiness 
. re, _ solution. They forget that eCompanies need an management solutions as you grow and your 


integrated and comprehensive security solution needs change. eTrust is built on a standards 
that provides best-of-breed functionality based, open infrastructure, so it’s always easy 
I to plug in any other concn ox 
eTrust Enables eBusiness products or solutions 
elrust™ provides all the security solutions an 
eBusiness needs 


COMPREHENSIVE — From the browser to the 


mainframe, ensuring complete security in today's 
Security is the number one concern of every IT highly complex environments 


professional. The good news is that there’s a BEST-OF-BREED — eTrust solutions offer 
proven solution you can trust best-of-breed functionality across the board 


Without roof Security, $ fll INTEGRATED— All eTrust solutions are 
itho Bullet-P ecu , uccess | paeee ’ oe , : st ' ; ; ) ce : Zh : | 
~ a 2SIG ed < } Du o work t¢ C ether seamless y 


EASY — elrust solutions are easy to use, 
The only thing bigger than the opportunity that deploy, and administer, ensuring any environment 
comes with putting your business on the Web is is secured quickly and correctly 
ahonsshasiitedayiaetasibapadaie MISSION-CRITICAL — eTrust solutions offer the 
Undetected attacks can strike at any time, scalability, depth eTrust is Trustworthy 


mm <2 navheroe ye orms Vic O ~ 1S . : i 4 
from anywhere, in a variety of forms. Most sites and robustness eTrust Security élrust is not only backed by the world’s leading 


can't eve 3) =) ] ew eats P 
an't even track every attempt. And new threats fast-growing and Suite security software company,* it is also comple- 
| successful ¢ Access Control 








are developed every day, all over the world 


C Acuniiiniveti mented by a complete set of outcome-based 
Without the right protection, eCompanies ris nivaniies e Administration 
Vithout the right protection, eCompanies risk eBusinesses need service offerings. CA Services™ stands ready 


losing everything: data, customers, revenue, * Single Sign-On 
J everything: data, Customers, revenue to make sure your implementation is fast and 


and mo eTrustis Open fiamkacy 


AndExtensibie jim Content Inspection trouble-free. 
: " e Intrusion Detection If your company is making the difficult t 
A Simple Solution To Your Most 


Complicated Challenge eTrust allows you * Policy Compliance to an eBusiness, you owe it to yourself to find 


to leverage exist ¢ Audit out more about the security solution more 
Online business through eCommerce, corporate ing investments in e Virtual Private Network eBusinesses trust 
intranets, partner won transactions on security solutions © Encryption 
extranets and websites, all need to be secured — you will never * Directory For more information, 
Protecting the integrity and availability of intranet have to start over acres Call 1-800-377-5327, or visit 


¢ Anti-Virus 


information is critical to all organizations or convert anything ca.com solutions enterprise /etrust/ 


elrust 


Computer Associates” Backed By The #1 Security Software Company 
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MEASURING 
SUCCESS 
ON THE NET 


The all-too-visible fizzle of 
er dozens of Internet companies 
has led many executives to 


MAKING MAGIC ON THE WEB 


As a child, David Holland was fascinated with magic. That passion serves him well as Web 


application developer at Dark Horse Comics, whose six Web sites feature animated serial 


movies, online comic books, downloadable games and a host of merchandise related to fan- 


tasy entertainment, from The Ring of the Nibelung to Buffy the Vampire Slayer. Page 64 
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NEWS 


6 MICHELIN LEARNS the 


value of having a CRM system 
in place, as customers pelt the 
company with information 
requests after the Firestone 
tire recall. 


7 NAPSTER LOSES on appeal, 


but observers doubt the U.S. 
government can really regulate 
peer-to-peer services. 


8 EYT LAUNCHES an as? sys- 
tem for hospitals and emer- 
gency medical personnel, who 
can use it to see which emer- 
gency rooms are available. 


8 PROCTER & GAMBLE and 
Cinergy are building a fiber- 
optic network in Cincinnati 
and donating some of the 


bandwidth to nonprofit groups. 


10 LOVE-STRUCK ROMEOS 
have to wait on Valentine’s 
Day, as heavy traffic slows 
online florists’ Web sites. 


12 THE PUSH TO EXTEND the 
Internet tax moratorium be- 
gins in Congress, as companies 
question how they might be 
affected if the effort fails. 


73 THE KOURNIKOVA WORM 
spread quickly throughout the 
U.S. but did little harm, espe- 
cially to the users who learned 
their lessons from previous 
viruses. 


How to Contact CW 
Shark ‘Tank 
Company Index 


FEBRUARY 


BUSINESS 


36 SUPERMARKET PULLS 
the plug on its SAP system, 
raising questions about the 
effectiveness of SAP’s appli- 
cations for retailers. 


E-GM EXEC SAYS company- 
wide cuts won't affect the auto- 
maker’s e-business initiatives. 
WORKSTYLES 

BERKELEY LAB’S tr de- 
partment supports a network 
of thousands of scientists and 
researchers around the world. 


TOOLS HELP companies 
guard their fortresses against 
fraud from within and without. 


REGIONS GO WILD over 


high-tech monikers, but do 
they live up to their names? 


TAXES DON'T have to spell 
doom for consultants. Take it 
from those who have learned 
the hard way. 

QUICKSTUDY 

QUICK RESPONSE can help 
retailers keep their shelves 
from going empty. 


Se 


)PINIONS 


28 PATRICIA KEEFE discovers 
that IT is helping Russia cata- 
pult its economy out of its 
Soviet-induced stagnation. 


PIMM FOX says that while 
Cisco may have missed Wall 
Street’s estimates, the compa- 
ny’s real problem is its frag- 
mented business. 


demand detailed status reports 
on how their own e-commerce 
sites compare. But there’s not a 
lot of deep historical benchmark- 
ing data to measure against. 


Page 42 
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TECHNOLOGY 


52 ASPSFINDa way to tie cus- 
tomers into companies’ back- 
end financial systems without 
compromising security. 


53 BANK OFFERS customers 
virtual safe-deposit boxes that 
they can use to store electronic 
documents and then share 
them securely over the Web. 
SECURITY JOURNAL 

54 ‘MATHIAS’ IS nis company’s 
first security manager, so he 
must build a staff and a budget 
and figure out how to begin. 
HANDS ON 

56 NOTEBOOK PCS come in 
many varieties. Computerworld 
looks at two very good, very 
different models. 

FUTURE WATCH 

58 PRIVACY MAY MEAN 
something new in a world 
connected by always-on 
information systems. 
EMERGING COMPANIES 

62 ATTENZA HELPS big-time 
customers like Visa automate 
their online help desks. 


EPO A NSE TE RNEASY Ta 


29 JOHN GANTZ writes that 
with the growth in Internet 
use, companies must invest 
more heavily in security. 


32 DON TAPSCOTT suggests 
that despite Nasdaq’s yearlong 
dive, you shouldn’t believe any 
goofy theories that the New 
Economy is in trouble. 


32 WILLIAM M. ULRICH offers 
some strategic advice about 
enhancing collaborative com- 


ONLINE 





For news, opinions, analysis and 
interactive discussion forums fo 
cused on Windows 2000, head to 
our Wind 2000 Cx ity 


www.computerworld.com/win2k 





Security re 
porter Deb- 
orah Radcliff 
introduces us 
to the people 
who are track 
ing down 
spammers 
and Internet 
fraudsters 

in the E-Commerce Community. 

www.computerworld.com 

ecommerce 


Meanwhile, reporter Jennifer 
DiSabatino contemplates what hap 
pens when warnings about a virus 
that clogs your e-mail system actually 
clog your e-mail system. Read the 
tongue-in-cheek account of her week 
covering the Anna Kournikova virus 
on the Security Watch page. 


www.computerworld.comAecurity 


merce at your company. 


ED YOURDON reveals the 
two important questions man- 
agers must ask at the start of 
IT projects regarding their 
success or failure. 


FRANK HAYES warns that 
if you install off-the-shelf 
enterprise software, you may 
have to ask: “Do we want to 
surrender control of the way 
we do business?” 


a www.computerworld.co 
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Dell Announces First 
Layoffs in Its History 


Despite issuing a profit warning last 
month, Dell Computer Corp. on Feb. 
15 announced what it called 
“strong” results for its fourth quar- 
ter ended Feb. 2, due in part to a 
63% increase in demand for its 
servers. Even so, the Round Rock, 
Texas-based company said it will 
lay off 4%, or 1,700, of its full-time 
staff as a cost-cutting measure. 
Dell doesn’t expect to announce 
any more across-the-board layoffs 
this fiscal year, said Kevin Rollins, 
one of Dell's two vice chairmen. 
The job cuts - the company’s first - 
were made as soon as Dell felt the 
impact of “a global recession,” 
Rollins said. 





Verizon Faces Lawsuit 


NorthPoint Communications Group 
Inc. has been given the go-ahead to 
take a $1 billion compensation claim 
against Verizon Communications to 
court. San Francisco-based Digital 
Subscriber Line (DSL) service 
provider NorthPoint filed suit 
against New York-based Verizon 
last December in response to 
Verizon's attempt to terminate an 
agreement to merge the two com- 
panies’ DSL businesses. 





Shuttle Astronaut 
Phones Home 


Marsha Ivins last week became the 
first astronaut to make a telephone 
call to Earth. She made the call to 
NASA flight director Bob Castle at 
Houston Mission Control from the 
space shuttle Atlantis. Ivins used a 
notebook PC loaded with software 
called IP SoftPhone from San Jose- 
based Cisco Systems Inc. 


would 





Short Takes 


Hong Kong investment companies 
HUTCHISON WHAMPOA LTD. and 
CHEUNG KONG HOLDINGS LTD. 
said they have together acquired 
PRICELINE.COM INC. stock worth 
$24 million from the Norwalk, 
Conn.-based company’s founder, 
Jay Walker. . . . IBM said it will 
spend as much as $200 million 

in the next four years to pay for 
Linux development in the Asia/ 
Pacific region. 


| crisis,” 


NEWS 


7 CRM Helps Ward Off | 
‘Trouble Before It Starts 


When the Firestone tire scare hit, a CRM 
system helped avert disaster at Michelin 


BY MARC L. SONGINI 


HE TIRE BLOWOUT 


disaster that over- | 


whelmed Firestone 

last summer had 

an unexpected pos- 

itive effect on one of its top 
competitors. 

After a spate of news stories 

last August about defective 


Firestone tires causing fatal | 
custo- | 
mers inundated the call center | 


accidents, concerned 
at Greenville, S.C.-based Miche- 
lin North America Inc. to make 
sure that their tires didn’t have 


the same problems. But despite | 


the 100% spike in call center 
activity, Michelin was able to 
meet the challenge, thanks to a 


customer relationship manage- | 


ment (CRM) package it had 


| put in place just nine months | 


‘Expectations Divided on Oracle's AppsWorld 


before the crisis hit, said 
Michelin officials. 
“There was a halo 
from that particular situation,” 
said Larry Mims, centralized 
services team manager at 
Michelin. “If we had not had 
the [CRM system in place], we 
have had 
costs in extra manpower. 
Michelin’s situation 


illus- 


trates the need to have a solid | 


CRM system in place — not 
just to better serve customers 
but also to cope with the unex- 
pected, observers said. 


do is hang up on the customer 


complaint,” said Mike Schiff, | 


director of data warehousing 
strategies at research firm Cur- 
rent Analysis in Sterling, Va. 


Unfortunately, at Nashville- 
based Bridgestone/Firestone | 
Inc., things didn’t run so | 


smoothly. 


After the tire recall was an- | 
nounced, the number of hits on 
the company’s Web site more | 
| than doubled, crashing the site | 
for 12 hours. The firm had to | 


turn to an external Internet 
service provider to assist with 
the Web site hosting. 


said a 


effect | 


additional 


that the company is now 


evaluating its customer rela- 


tions systems and expanding | 


its Web-based services. 
Dearborn, Mich.-based Ford 

Motor Co., whose Explorer 

sport utility vehicles were 


most affected by the faulty 


| tires, also had to establish a 


high-tech, quick-response “war 


room” to cope with managing | 


the tire recall and replacement 
efforts [News, Sept. 25]. 


Fortuitous Preparation 

Luckily for Michelin, it had 
installed a CRM system from 
Astute Inc. in Columbus, Ohio, 
in November 1999 for less than 
$500,000. Without _ it, 
might not have been able to 
capture as much of the infor- 


“we 


OAUG charges that 
conference is just 


a marketing tool | 


| whose members maintain that | 


BY MARC L. SONGINI 


Users hoping to get the low- | 
| Oracle to fold its twice-a-year | 


down on Oracle Corp.’s new 


| products and its vision for the | 
“The last thing you want to | 


future will be heading to New 


Orleans this week for the com- | 
pany’s first U.S. AppsWorld | 
conference, which kicks off to- | 
| day with a keynote speech by | 


former President Bill Clinton. 
But if Oracle’s 


any indication, 
show won't get high marks 


Paris, is 


from Beth Barling, an analyst at | 


AMR Research Inc. in Boston. 

“Oracle admitted that Paris 
was a dry run for New Orleans, 
and from perspective, 
dry was the word,” she said. 
“(There was] little 


our 


news or 


| vision beyond a barrage of 
| “We have learned that you | 
| can never be too prepared for a | 
Bridgestone | 
| spokeswoman, who explained 


marketing messages that were 
already well known.” 

Oracle refused repeated re- 
quests from Computerworld 





mation from the consumers as 
we otherwise would have,” said 
Chad Hake, Michelin’s director 
of consumer relationships. 
Using a customer’s phone 
number, Michelin was able to 


aggregate information about 


individual tire owners and get | 
an idea of the concerns they | 


had with a given tire on a par- 
ticular type of car, said Hake. 


Michelin was not only able | 
to handle the huge influx of | 


calls, faxes and Web inquiries, 


but it was also able to collect | 
valuable data from customers | 


that could later be used for 


But installing a system for | 
crisis control can be a tough 


sell for IT departments, said 
Schiff. “Can someone say, “We 


need a server that’s twice as | 


powerful in case of a recall?’ ” 


he asked. “Management does | 


not want to hear bad news.” 


for comment. 


| marketing and to improve CRM | 


The show has caused a ma- | 


jor rift between Oracle and the | 


| independent Oracle Applica- | 


tions Users Group (OAUG), | 


AppsWorld is nothing more | 
than a marketing tool. OAUG | 
turned down a request from | 


conference into AppsWorld. | 
Instead, members said they | 


would prefer to have an inde- 


pendent show devoted to edu- | 


cating users about 


products. 


European | ¢ 
AppsWorld, held last week in | 
the | 


WILL BILL CLINTON’S keynote 


help foster AppsWorld credibility 
among Oracle users? 


Oracle | 
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But trying to assemble a 
CRM system after a disaster 
hits, like with the Tylenol 
cyanide scare years ago, isn’t a 
good idea, said Bob Zurek, an 
analyst at Cambridge, Mass.- 
based Forrester Research Inc. 
The call center staff has to be 
trained and the CRM data has 
to be prepped to create inte- 
grated customer profiles, or it 
won't work. “Remember, the 
competition is just a click 
away,” Zurek said. D 


If we had not 
had the [CRM 
system in place], 
we would have 
had additional 
costs in extra 
manpower. 


LARRY MIMS, CENTRALIZED 
SERVICES TEAM MANAGER, 
MICHELIN NORTH AMERICA 


While some users will be 
able to get insight into industry 
direction and see new prod- 
ucts, said Donna Rosentrater, 
an OAUG board member not 
attending AppsWorld, “I still 
haven't seen many how-to pre- 
sentations on the agenda.” 

OAUG users have been 
clamoring for support when 
upgrading to Oracle’s new 
E-Business Suite lli software 
from previous versions. 

Rosentrater said that until 
her company can get lli up and 


| running safely, she “cannot reap 





the benefits of the ‘new world’ 
of e-business” that Oracle plans 
to showcase at Apps World. 

Doug Allen, CIO at Host- 
Centric Inc., a Houston-based 
Web hosting firm using Oracle 
to tie together its business 
processes, does plan to attend 
the conference. He said he’s 
particularly interested in see- 
ing a preview of some collabo- 
rative sales modules. “This is a 
good opportunity to see the 
up-and-coming products we 
don’t have implemented and 
how they would be working in 
our business,” he said. D 
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Can Napster Be Stopped by t 


Music-swapping technology may be too 
pervasive for law to contain, say analysts 


BY MICHAEL MEEHAN 

Even if the the Recording In- 
dustry Association of America 
(RIAA) manages this week to 
shut down online music-swap- 
ping service Napster Inc., it 


may find that it can’t stop rock | 
’n’ roll. At least not when that | 


rock ’n’ roll is being dissemi- 


nated over the Internet, ac- 


cording to legal experts and in- | 


dustry observers. 


The U.S. Court of Appeals in | 
San Francisco last Monday up- | 


held an injunction that would 
shut down Napster before a 
suit brought by A&M Records 
is heard on its merits. The San 


Mateo, Calif.-based Web site | 


may have to cease operations 


as soon as U.S. District Court | 


Judge Marilyn Hall Patel re- 


works her injunction against | 


Napster. 


Napster officials have vowed | 
to “pursue every avenue in the | 
courts and the Congress to | 


keep Napster operating.” 


Yet, Napster is just one of | 


many sites that allow electron- 


ically copied music files to be | 
vice | 
president of communications | 
at the Consumer Electronics | 
Association (CEA) in Arling- | 


swapped. Jeff Joseph, 


ton, Va., noted that those sites 
can operate well outside the 
jurisdiction of U.S. copyright 
laws if they choose to do so. 
“(The RIAA] may have 
achieved a legal result that’s 
unenforceable,” said MIT asso- 


ciate professor Jim Short. “It’s | 


a bit like citing them for jay- 
walking.” 

Short said he believes the 
music industry and the courts 
have yet to grasp “the enormi- 
ty” of the technological issues 
that exist in the Napster case. 

“The [RIAA] doesn’t under- 
stand how to effectively em- 
ploy this new technology, and 
they’re resisting a change in 
their business model,” Short 
said. “Even if they do adopt 
this technology, it’s probably 
not one they’re going to be able 
to control.” 

And there’s the rub: Music 
has become nothing more than 
an electronic file that can 
shipped over an Internet line. 
What was once proprietary 





merchandise is now data in a 
world built for the ready trans- 
mission of data. 

“Not only is the genie out of 
the bottle; the bottle’s broken,” 
Joseph said. 


Enforcement Issues 





e Courts? 


against Patel’s ruling, calling it 
out of touch with the reality of 
an Internet-driven economy. 
“If you look at any consumer 
electronic product, the key is 
access to content,” Joseph said. 
“Take that away, and you'll have 


| achilling effect on innovation.” 


The CEA lobbies for the U.S. | 
consumer electronics industry | 
and has almost 600 members, | 


including Sony Electronics Inc., 


Intel Corp., Compaq Computer | 
Corp. and Cisco Systems Inc. In | 


August, CEA filed a protest 


Elizabeth Fleming, an attor- 
ney at Washington law firm 
Preston Gates Ellis & Rouvelas 
Meeds LLP, said U.S. copyright 


laws make no distinctions be- | 


tween music recorded on CD 
and music that is electronically 


copyright protection 
sions with the U.S. 
If Napster or a similar ser- 


NEWS 


vice wanted to place its servers 
in a nation that didn’t recog- 
nize U.S. copyrights, then the 
RIAA would have few legal 
avenues to enforce those copy- 
rights. 

Peer-to-peer service “is not 
a rocket science technology, by 
any stretch of the imagina- 
tion,” Short added. “You can 
set these things up just about 
anywhere.” 

Motivated people find a way 
to get what they want, Short 
said. 

“The technology’s out there, 
and it’s not going to stop here,” 
he said. “You can’t make it go 


| away. If anything, we're only 
distributed. But she noted that | 
not all nations have agreed to | 
provi- | 


seeing the beginning of this 
technology, and the more the 
industry tries to clamp down 
on it, the more it will spur the 
technology on.” D 





DOJ Investigates Microsoft's 
$135M Investment in Corel 


A Corel user, DOJ 


has stake in outcome | 


BY PATRICK THIBODEAU 
WASHINGTON 

An end user with a very big 
stake in the future of Corel 
Corp. — the U.S. Department 
of Justice (DOJ) — is using its 


legal powers to probe the anti- | 


trust implications of Microsoft 
Corp.’s recent $135 million in- 
vestment in the 
software vendor. 
Officials at both Microsoft 


struggling | 


and the DOJ last week con- | 


firmed that the agency is seek- 


ing documents related to the | 
investment deal and strategic | 


alliance that Microsoft 


and | 


Ottawa-based Corel signed last | 


October. The two office soft- 
ware rivals said the agreement 
signaled the start of increased 


collaboration, including joint | 
development, testing and mar- | 


keting initiatives. 


The DOJ is looking into “the | 


competitive effects of the 
transaction,” said agency 
spokeswoman Gina Talamona. 
However, she declined to 
comment on the scope of the 
investigation or when the DOJ 
began its probe of the deal. 
Microsoft spokesman Jim 
Cullinan said DOJ officials 
made “a narrowly focused re- 





quest 


any legal concerns, but we are 
cooperating with the Justice 
Department to provide them 


with the information they've | 


requested,” he added. 

Corel’s WordPerfect suite of 
office applications competes 
against Microsoft Office, but 


market research firm IDC in | 
Framingham, Mass., said Mi- | 
| Information Industry Associa- 


| only 
| competitor has got to raise 





An End User 
With Clout 


What happened? In Octo- 
ber, Microsoft made a $135 million 
investment in operating system and 
applications competitor Corel, which 
makes WordPerfect, a Linux operat- 
ing system and other business and 
graphics applications. 


What’s the problem? In 
January, Corel said it may spin off its 
Linux operating system business. It 
also said it would focus on taking care 
of existing WordPerfect customers 
and not on building its customer base. 
Microsoft said its deal calls for Net 
cooperation and nothing else. 


What’s the DOJ doing? It 
wants to see if antitrust rules have 
been violated. The DOJ may be one 
of Corel’s biggest customers, with a 
WordPerfect enterprise license for 
more than 35,000 workstations. 


information about 











crosoft controls approximately 
94% of the word-processing 


| portion of the market. 


However, the DOJ is a major 


| WordPerfect user: In 1999, it 


bought an enterprise site li- 


| cense that covered the installa- 
for information” about | 
the deal. “Nothing in our in- | 
vestment in Corel should raise | 


tion of Corel’s software on a 
total of 35,886 PCs. That con- 
tract runs for three years, 
according to a DOJ official. 
Some critics of Microsoft 
welcomed the DOJ’s investiga- 
tion of the Corel deal. 
“Microsoft has market pow- 
er in Office, and to invest in its 
significant remaining 


questions,” said Ken Wasch, 
president of the Software & 


tion in Washington, which has 


| filed briefs in support of the an- 


titrust case against Microsoft. 
Wasch called the request for 
Corel “a 
perfectly reasonable inquiry” 
into antitrust concerns. In 
particular, he cited a restruc- 
turing announcement made 
last month by Corel, in which 


| the company said it will target 
| WordPerfect at 


the current 
installed base and try to spin 
off its Linux operating system 
distribution division. 

As part of the restructuring 
announcement, Corel CEO 


Derek Burney said executives | 
| make Microsoft “more willing 
| to share the code [needed] to 


at the company were “choos- 
ing not to go into a head-to- 
head _ battle” 
because most users have se- 
lected the latter’s office suite 
as a de facto standard. 


But Cullinan said there was | 


nothing in Microsoft’s agree- 


with Microsoft, | 
| seamless,” he added. D 





Napster Time Line 


A brief history: 
May 1999 Napster debuts. 


December 1999 RIAA sues 
for copyright infringement. 
July 2000 U.S. District Court 
Judge Marilyn Hall Patel 
rules that Napster must 
remove all copyrighted 
material from its site. 
Napster appeals. 


October 2000 Napster an- 
nounces an agreement to 
create a fee-based service 
with recording company 
owner Bertelsmann. 
February 2001 U.S. Court 

of Appeals upholds Patel’s 
injunction. Napster vows to 
continue legal fight. 


ment with Corel that asked the 
latter firm “to do or not do any- 
thing” with its products. Corel 
officials “can make their own 
decisions about what software 
they want to develop for what 
platforms,” he said. The only 
exception, he added, was an 
agreement for Corel to devel- 
op software supporting Micro- 
soft’s .Net initiative. 

In any event. Corel’s Linux 
operating system efforts aren't 
making money, said Bill Clay- 
brook, an analyst at Aberdeen 
Group Inc. in Boston. If Corel’s 
Linux distribution plans are 
“the basis of [the govern- 
ment’s] investigation, it’s pretty 
shallow, as far as I’m con- 
cerned,” he said. 

WordPerfect is widely used 
by law firms that want to take 
advantage of formats that were 


| developed specifically for at- 
| torneys. 
| remains the standard at Alston 


The Corel software 
Hunt Floyd & Ing. But docu- 
ments frequently have to be re- 


| formatted on Microsoft Word 


for use by the firm’s corporate 
clients, said Herbert Chun, in- 
formation systems director at 
the Honolulu-based law firm. 
Because of that, Chun said 
he hopes Microsoft’s invest- 


| ment in Corel will help im- 


prove integration between the 
two products. The deal should 


make the translation more 





| George A. Chidi Jr. of the IDG 


News Service contributed to 
this article. 
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ASP Helps ERs Cope 


With Overcrowding 


testing the technology last | 


Provides capacity information via Net 
so hospitals can share information quickly 


BY JULEKHA DASH 

Tr ANY GIVEN 

time, about 10% 

of the emergency 

rooms in north- 

ern Virginia hos- 

pitals are filled to capacity, ac- 

cording to Pat Walters, senior 

vice president at Inova Health 
System. 

That can add up for a health 

care like 

which receives 150,000 emer- 


network 


gency room visits per year at 
its five member hospitals in 
Alexandria, Falls Church and 
Fairfax, Va. 

But 


overcrowding in emergency 


rooms. 


Last week, Chantilly, Va.- | 


based EYT Inc., formerly 


known as Ernst & Young Tech- 


nologies, announced an appli- | 
cation service provider (ASP) | 
system aimed at helping hospi- | 


tals communicate with one an- 


other and with emergency | 


management service (EMS) 


agencies about bed capacity. 


Better Information Availability 

“It doesn’t solve the problem 
of overcrowding, but it allows 
us to get better information on 
EMS systems [and] who has 
beds available,” said Walters. 
Falls Church-based Inova fin- 


ished beta tests of the ASP sys- | 
tem earlier this year and plans | 


to go live with it on March 1. 

In the past, emergency room 
officials sent faxes to a coun- 
ty’s EMS headquarters to share 
capacity information, said 
Walters. When the network’s 
five hospitals go live, they will 
be able to go to a Web site and 
provide information on capaci- 
ty that can be accessed sys- 
temwide. 


The problem of overcrowd- | 
ing in emergency rooms has | 
| area, company officials said. 


been a growing concern in the 


health care industry for years. | 
The number of U.S. emergency | 
| said the project is a joint effort 
between his company and Cin- | 
ergy Corp., also in Cincinnati. | 


departments decreased from 
6,291 in 1995 to 4,995 in 1997, 


but emergency room visits 


Inova, | 


new technology may | 
help hospitals better cope with | 


have increased from 89.8 mil- | 


lion in 1992 to 100.4 million in 
1998, according to figures pro- 
vided by the American College 
of Emergency Physicians in 
Irving, Texas. 


A Good Fit 

An ASP model suits health 
care because of its rapid de- 
ployment and low cost, said 
John Madden, an analyst at 


Boston-based Summit Strate- | 


gies Inc. “Hospitals don’t want 
to have to implement complex 
applications themselves,” he 
explained. 

Inova, which began beta- 


summer, is currently paying 
$100 per month for the service. 


“Tf [it] was complicated and | 
expensive, I wouldn't have | 


done it,” said Walters. 


Andy Feinstein, team leader | 


of the EYT project, said that 
while the company hasn’t yet 
determined pricing for the ser- 
vices, it will charge hospitals 
“well under” $1,000 per month 
to use the software. 

David Dodge, a systems en- 
gineer at MetroHealth Medical 
Center in Cleveland, said that 
in his organization, officials 
communicate emergency room 
capacity by phone. If that in- 
formation were sent via the In- 
ternet, it would save time and 


could reach more people more 


quickly, he said. 





P&G Bandwidth to Benefit 


Not-for-Profit 


Firm hopes fiber-optic 
network will boost 
IT in hometown 


BY JAMES COPE 
Aiming to satisfy its own infra- 
structure needs and simultane- 


| ously boost the IT image of its 
hometown of Cincinnati, Proc- 
ter & Gamble Co. (P&G) re- | 
ported last week that it would | 

begin construction of a metro- | 
| ty College, said 


politan-area network. 
The large consumer prod- 
ucts company, known 


ning installation of a 60-mile 


optical network next month. | 
| The network will link P&G's 
seven corporate campuses in | 


the Cincinnati metropolitan 


Jim Scholefield, data com- 


munications manager at P&G, | 
| Scholefield. 


| taries move P&G 
bit/sec. up to gigabit speeds, | 


for 

brands like Tide laundry deter- 
gent and Crest toothpaste, is in | 
the final stages of the engi- | 
neering needed before begin- | 


eighbors 


the summer. 

Not only will the new optical 
fiber ring and its optical tribu- 
from 45M 


but they will also pro- 
vide free bandwidth 

to nonprofit or- 
ganizations such 

as Cincinnati 

State Technical 

and Communi- 


Scholefield. 
Several addi- 
tional area orga- 
nizations, yet to 
be named, can ex- 
pect a fast and free 
ride on the P&G op- 
tical freeway too, ac- 
cording to company offi- 
cials. These groups, like the 
college, will enhance the 


| lifestyle of the community and 
contribute to the growth of | of band- 


e-commerce in the area, said 
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| NEW WEB-BASED technology gives hospital emergency room staffs an 


easy, inexpensive way to quickly check bed capacity at other facilities. 


While reporting on the sta- 


tus of available beds is usually | 


accurate, it’s occasionally “de- 
layed or confused,” Dodge 


said. “[Sometimes]” a change 


in status is not communicated 
to the dispatch teams or other 
emergency departments.” 
Chris Coulter, business sys- 
tems manager at Archbold 
Medical Center in Thomas- 
ville, Ga., said the technology 


| 
| 
| 


may be useful in a metropolitan 
setting, but it wouldn’t be need- 
ed in a rural facility like Arch- 
bold, which is the only medical 
center in the community. 

Mark Anderson, head of re- 
search at Stamford, Conn.- 
based Meta Group Inc., said 
EYT’s application can be use- 
ful, but it isn’t foolproof. 

“{It’s] only as good as the 
data,” he noted.» 





| bandwidth will enable his in- 


stitution to better “prepare job 
seekers and incumbent work- 
ers for productive participa- 


tion in the New Economy.” 


| Building on a Strong Base 
| Scholefield said he expects to | 
“light the fiber” and go live | 
with the network by the end of | 


Scholefield stressed that be- 
cause Cincinnati is home to 
telecommunications company 
Broadwing Inc. and its sub- 


| sidiary Cincinnati Bell, the ex- 
| isting broadband 
| ture is already considerably 


infrastruc- 


better than that of many larger 
cities. 

The network will, how- 

ever, resolve the chal- 

lenge Scholefield de- 

scribed as “buy- 

ing each small 

piece 


THE MAKER of such 
brands as Pringles, 
Tide and Crest hopes 
its bandwidth donation 
will help community 
members prepare for 
the New Economy. 


width as we 
need it,” noting, “We’ll be able 


Ron D. Wright, president of | to get as much bandwidth as 


Cincinnati State, said the gift of | 


we need out of the box.” 





| 
| 
| 
| 
| 
| 
| 


est 


Scholefield said the new 
fiber ring is a “good financial 
deal” for P&G, but he wouldn’t 
reveal the cost of the network. 
He did say, however, that the 
installation cost will be shared 
equally with Cinergy, which 
will do the actual fiber instal- 
lation. 

Scholefield said P&G will use 
the optical network for data, 
voice and video. Testing is al- 
ready close to completion on IP 
telephones from several manu- 
facturers, he said. IP telephony 
would be widely deployed over 
the network in the future, he 
noted. 

The optical network will be- 
come part of backbone that 
connects P&G headquarters to 
its other facilities around the 

globe, Scholefield 
said. “Our regional 
and global hub 
routers are located 
two different 
sites on opposite 
ends of the city,” and 
the optical network 
will connect those, he 
explained. 

Mary Regan, an an- 
alyst at The Yankee 
Group in Boston, said 
that P&G’s approach 
is “innovative” and 
that she isn’t aware of any oth- 
er large companies taking this 
kind of community initiative. D 








One day you wake up and realize that your e-commerce site is, 


Cisco has. 


Ninety percent of Cisco orders are processed through a critical e-commerce 
application called Cisco Connection Online. It brings together over 400 content 
developers, 700,000 data files, and 175 applications to generate $55 million 


in revenue every day. Needless to say, as CCO goes, so goes Cisco. 


Cisco asked Kintana for help in technology chain automation for this 

e-commerce side of their business. By providing secure, systemized processes 

with increased visibility, self-service reviews and approvals, and automated 
deployment of new site functionality, we have delivered in spades. Revenues through 
CCO have quadrupled from $4 billion to $17 billion a year, while the team 


required to manage the site has decreased by 25%: 


Believe it or not, results like these can be achieved almost overnight. We can 


radically accelerate the speed af which your business can evolve. Do it in Kintana time. 


= KIN TANA 


well, all your commerce. 


"Have you heard of Kintana? 





Mark Tonnesen, Vice President Information Technology 


Cisco Systems 








nit 
otwire Adds Airlines, 
Rental Cars to Its Site 


Hotwire, the new airline-funded 
rival to struggling Priceline.com Inc. 
in the online discount travel busi- 
ness, last week announced that 19 
international airlines and two large 
rental car companies - Budget Rent 
a Car Corp. and The Hertz Corp. - 
have agreed to list available book- 
ings on its Web site. The additions 
expand Hotwire’s air travel offerings 
beyond the eight U.S.-based airlines 
that had previously signed up to use 
the San Francisco-based company's | 
site. The airline and rental car deals 
follow Hotwire’s rollout last month 

of a hotel room reservation service. 


IBM Gets $200M 
Nod From Kmart 


Kmart Corp. last week announced 
plans to spend $270 million to in- 
stall new point-of-sale terminals 
and mobile computing technology in 
its retail stores as part of a two- 
year IT overhaul effort the company 
detailed last summer. 

The rollout is beginning with a 
$200 million purchase of Internet- 
enabled cash registers from IBM 
and a $70 million installation of 
handheld computers and wireless 
LAN devices made by Symbol Tech- 
nologies Inc. in Holtsville, N.Y. The 
deals with IBM and Symbol Tech- 
nologies are part of the $670 mil- 
lion IT investment Troy, Mich.-based 
Kmart outlined in July. 


Microsoft Launches 
Outlook Mobile 


Microsoft Corp. announced the 
worldwide beta launch of Microsoft 
Outlook Mobile Manager last week 
at DEMO 2001 in Phoenix. The 
desktop PC application extends 
Outlook messaging and collabora- 
tion to a variety of mobile devices, 
including text-enabled phones and 
handheld PCs. The beta version is 
available for free download at 
www.microsoft.com. 

A note on the Web site says orga- 
nizations must have the Simple Mail 
Transfer Protocol (SMTP) relay in 
the Microsoft Exchange e-mail 
server turned on for Mobile Man- 























ager to work. Some organizations 
have turned off SMTP for security 
purposes. 


‘Telecom Industry 
Faces Massive Layoffs 


| been talking with recruiters 
| about jobs in systems adminis- 
| tration and desktop and cus- 


| As market values plummet, firms 


trim staff, shift focus toward new areas | 


| BY JULEKHA DASH 


OMPETITIVE _ pres- 
sures have prompt- 
ed telecommunica- 
tions firms to elim- 


inate thousands of | 


positions in recent months as 


| they shift their focus to areas of 


higher growth. 
Thirty-one Internet compa- 
nies that specialize in telecom- 


munications products and ser- | 


vices have announced layoffs 


| within the past six months, ac- | 
| cording to The Industry Stan- | 
| dard magazine. 

Verizon Communications in | 
New York reported last week | 
| that it would cut 10,000 jobs 
| through attrition and reduc- | 





~ NEWS 


a clip of about 20% per year, 
said Thonis. 

Sprint Corp. eliminated 200 | 
to 250 jobs in the desktop ser- | 
vices area in November but 
gave workers the chance to | 
seek jobs in other divisions, 
said company spokeswoman 
Katrina Bawcom. 

Wayne Mitchell worked at | 
Sprint Enterprise Network | 
Services in Dallas for about 18 | 
months as a technical service 
consultant before he was laid | 
off. He was offered another job, | 
but it involved installing third- | 
party software. 

It “was not a challenging op- 
portunity,” said Mitchell, who 
is still unemployed but has 


tions in the use of consultants | _ 


| and the amount of employee 


overtime. And a week earlier, 
Milpitas, Calif.-based PCtel 


| Inc. announced an 11% head- 
| count reduction and a hiring 


freeze. 


“My phone is ringing more | 
| often these days with candi- | 
dates looking for positions,” | 


said Richard Murphy, a 
cruiter at Miami-based 


re- 


The 


| Recruiters Group Inc., which 
| specializes in the telecommu- 


nications sector. 


| Downward Trend 


Brownlee Thomas, an ana- 


| lyst at Cambridge, Mass.-based 


Giga Information Group Inc., 
said that unlike last year, when 
the market values for these 


| firms were soaring, many are 
| now tanking along with the 
rest of the stock market. As a 


result, many telecommunica- 


tions companies are laying off 
| customer service representa- 


tives and low-level techni- 
cians, said Thomas. 

At Verizon, about 1,500 em- 
ployees will lose their jobs, 
but, in most cases, they will be 
given a chance to transfer to 
other divisions, said spokes- 
man Peter Thonis, noting that 
areas such as data services are 
growing 30% per year vs. 3% to 
4% growth for voice services. 
Bedminster, N.J.-based Verizon 
Wireless Inc. is also growing at 


| Day 


week, online florists found transactions per day to 100,000 





E-Florists Overwhelmed 
By Valentine's Day Crush 


Download time 

suffers from volume | 

a 

| 

BY JAMES COPE | 
As online orders for Valentine’s 
flowers blossomed last 


themselves struggling to keep 
up with huge increas- 
es in transaction vol- 
umes while  cus- 
tomers were forced 
to practice patience, 
according to two 
Web site perfor- 
mance measurement 
services. 

One site, San Di- 
ego-based Proflow- 
ers.com, was SO over- 
whelmed with traffic 
that consumers had to wait 30 | 
seconds or more just to down- 
load its home page, according 
to results released by Web 
measurement firm Keynote 
Systems Inc. in San Mateo, 
Calif. Officials at Proflowers 
declined to comment on the 
firm’s Web site performance. 


| and the opportunities dried up 


| their share prices plunge. Last 


| The Murray Hill, NJ.-based 


| jobs. 


| AT&T and WorldCom haven't 


| online specialty retailers dur- 


JOHNSON: FTD 
strives to optimize 
performance. 


tomer support. “I decided not 
to do that, [and then] the econ- 
omy started taking a drop, 


really fast.” 

The slump in the telecom- 
munications industry seems to 
be hitting everywhere. Even 
big-name firms like Lucent 
Technologies Inc. have seen 


week, Lucent traded at less 
than $15 per share; its 52-week 
high was about $75 per share. | 





networking equipment pro- 
vider announced last month | 
that it would eliminate 10,000 


While long-distance carriers 





announced layoffs in recent | 


The big challenge for many 


ing holiday shopping bursts is 
having the ability to scale for 
big spikes in orders, said Neal 
Goldman, an analyst at The 
Yankee Group in Boston. Being 
able to scale from, say, 1,000 


“isn’t all that easy,” he added. 

A spokesman for 
1-800-Flowers.com 
Inc. in Westbury, 
NY., said it handled 
tens of thousands of 
orders each day dur- 
ing the holiday peri- 
od, but he wouldn’t 
comment on the com- 
pany’s Web site per- 
formance. 

But if the Keynote 
statistics are any in- 
dication, 1-800-Flowers strug- 
gled to keep pace during Cu- 
pid’s crush. According to the 
survey, the average amount of 
time needed to download the 
online florist’s home page us- 
ing a Tl line increased from 
1.77 seconds on Feb. Il to 4.99 
seconds one day later. 
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Disconnected 


Recent head-count reductions 
in telecommunications: 


When: February 
Company: Nortei 
Reduction: 10,000 workers 


When: February 

Company: PCtel 

Reduction: 11% head-count 
reduction and hiring freeze 


When: January 
Company: Lucent 
Reduction: 10,000 


When: November and 
December 

Company: Covad 
Communications 
Reduction: 800 workers 








months, they, too, have been 
experiencing sagging share 
prices. 

“They're trying to convince 
shareholders that they’re a 
New Economy company,” said 
Thomas. “They are under tre- 
mendous pressure to be all 
things to all people.” D 


SolidSpeed Networks Inc. in 
Ann Arbor, Mich., which mea- 
sures site performance through 
a program installed on thou- 
sands of end-user PCs, report- 
ed that 1-800-Flowers averaged 
2.05 seconds on home page 
downloads last week. 

There was at least one no- 
table discrepancy between the 
results posted by the two mea- 
surement firms. SolidSpeed re- 
ported a home page download 
time of 1.77 seconds for Pro- 
flowers.com, compared with 
Keynote’s reading of 30 sec- 
onds. Goldman said these dif- 
ferences could result from dif- 
ferent measurement methods 
or even a glitch in the measure- 
ment software. 

But some sites held up well 
despite heavy transaction peri- 
ods last week. For the one-week 
period prior to Valentine’s Day, 
Keynote reported that FTD.- 
com inc. in Downers Grove, IIl., 
led the pack by averaging just 
1.68 seconds for its home page 
to fully display on a visitor’s 
screen using a Tl connection. 

FTD.com CIO Fred Johnson 
said his company works hard 
to optimize site performance. 
For example, the group uses 
technologies from F5 Net- 
works Inc. in Seattle to balance 
customer requests across mul- 
tiple Web servers. D 








VPNterprise 


CORNER OF 


WITH AGGRESSIVE LOCAL CALLING COVERAGE, 


VPNTeeprise™ CAN SAVE YOO OP TO 78%. 


We invite you to hit the road. 
And take the office with you. 
Because now with VPNterprise™, 
we've given even secure remote 
access a whole new meaning. 
Call it the reinvention of VPN 
technology. Call it business whenever, 
wherever. Either way, you can trust 
that all the critical applications 
and data available at your users’ 
desks 


whether 


are equally accessible 
they're _— strategizing 


in Stroudsburg, consulting in 


Canada, or at breakfast in 
Bangkok. It’s productivity 24-7. 

The difference is simple: We 
combine the ubiquity and cost 
savings of the Internet with the 
security of a private network. 

You might say that when 
your company is VPNterprised, 


where you go is your business. 


welcome to your global office. 


Waa milel-iailalateelin 
1-888-516-9372 


CAN YOO SAY BONUS? 








WHAT’S INSIDE 
VPNTERPRISE ? 


© Industry's most innovative 


remote-access platform 

Diversity & redundancy: multiple 
IP backbones 

Up to 70% savings over your 
current remote-access solution 
Advanced user-experience 

data collection & billing engines 
Coverage: the most aggressive 
local calling coverage available 
Future-proof: will seamlessly integrate 
emerging technologies 
Innovation Award-winning 


technology 





NEWS 


ig Companies Shy Away 
From Safe Harbor Accord 


But European data-protection agreement 
gets push from Hewlett-Packard signing 


BY PATRICK THIBODEAU 


EWLETT-PACKARD 
Co. last week 
signed up for the 
U.S. 
pro 


European 
safe harbor 
gram, making it the largest 
company to do so and provid- 
ing the struggling privacy ef- 
fort its biggest boost yet. 

The technology 
said the safe harbor privacy 
protections would be applied to 
all of its data transactions, lend- 
ing credence to the idea that the 


giant also 


accord may help strengthen 
privacy standards in the U.S. 
The safe harbor agreement 
provides a manageable “legal 
and ethical” means to move 


data between two continents, | 


Tax Moratorium Helps ISPs, 


“If corporations are serious | 


said Barbara Lawler, HP’s con- 
sumer privacy manager. 


about following the self-regu- 
lation approach [on data priva- 
cy] rather than having to deal 
with privacy regulations, then 
this is what they should be 
looking at,” she said. 


Some Decide to Wait and See 
But to date, only 21 compa- 
nies have signed up for the vol- 
untary harbor certifica- 
tion program, which provides 
legal protection from Europe’s 
tough data-protection laws for 
U.S. companies that transfer 


safe 


information about individuals | 


out of Europe. Companies that 
sign up for safe harbor must 
agree to adhere to a set of pri- 
vacy protection rules. 

Most of the companies that 
have signed up, with the excep- 


tion of HP and Murray Hill, | 


NJ.-based The Dun & Brad- 
street Corp., are small to medi- 
um-size firms. Larger, Fortune 
500-type firms “are investigat- 
ing their options or taking a 
wait-and-see approach,” said 
Jeff Rohlmeier, a trade official 
at the U.S. Department of 
Commerce. 


U.S. companies have been | 


“sort of reluctant to be first out 


of the box” to participate in the | 


safe harbor agreement for fear 


of being singled out by Euro- 
pean authorities, said Barbara 
Wellbery, who was the princi- 
pal negotiator of the agree- 
ment while at the Commerce 
Department. 

“So the more big companies 
on the list, the better,” added 
Wellbery, who’s now an attor- 
ney at Morrison & Foerster 
LLP in Washington. 

But Jean Cantrell, Dun & 
Bradstreet’s director of gov- 
ernment affairs, said the com- 
pany immediate 
benefits by agreeing to the safe 
harbor. For example, by con- 
solidating a U.K.-based data 


has realized 


center with one in New Jersey, | 


the company was able to save ¢ 
significant amount of money 
in legal expenses by gaining < 
waiver for the data transfers 
under the safe harbor 
ment. “I think [the accord is] 


agree- 


working in terms of its objec 
tive,” she said. 

The clock, however, is tick- 
ing on the agreement. 
The U.S. and 
Union safe harbor agreement 


European 


took effect last November, and 
European authorities plan to 
review U.S. corporate compli- 
ance this summer — and possi- 
bly begin enforcement actions 
soon after, say people familiar 
with the process. 

But the safe harbor pact isn’t 
the only option for companies 
that want to comply with Eu- 
rope’s 


data-protection laws. 


Companies can use a “model 


Does Little for E-Commerce 


States, e-retailers 


| 
seek simpler rules 


BY PATRICK THIBODEAU 
WASHINGTON 
A new push began this month 
in Congress to extend legisla- 
tion that is widely known as an 
Internet tax moratorium. But 
despite that moniker, the ini- 
tial legislation hasn't had a sig- 
nificant impact on e-com- 
merce except in one area: It 
states from imposing 
sales tax obligations on Inter- 
net service providers (ISP). 
The two lawmakers who 
championed the legislation, 
Sen. Ron Wyden (D-Ore.) and 
Rep. Christopher Cox (R- 
Calif.), recently introduced a 
bill that would extend the ban 
on new and discriminatory In- 
ternet taxes — meaning ones 
that single out e-commerce 
transactions and aren’t applied 
in the physical world — for an- 
other five years beyond its 
scheduled expiration in Octo- 
ber. It would make the ban on 
taxing Net access permanent. 


stops 


Other than the prohibition 
on new Internet access taxes, 
the legislation’s impact 
been largely “symbolic,” said 
Karl Frieden, a partner at 
Chicago-based Arthur Ander- 
sen and an Internet taxation 
expert. “It sent a message that 
Congress was extremely con- 
cerned about taxes on the In- 
ternet and [that it] wanted no 
new taxes.” Otherwise, the leg- 


has 








Tax Freedom 


The Internet Tax Freedom Act | | 


took effect in October 1998 
and expires this October. 


WHO IT HELPED: rc banned 


sales taxes on Internet 
service providers, except 
in states already charging 
sales tax. 


NEW ISSUE: So-called 


“bundled” services such 
as telephony and music, 
which may be included as 
part of an Internet-access 
charge, may also be ex- 
empt from sales tax. 








contract” that guarantees ad- 
herence to Europe’s data-pro- 
tection laws. The contract must 
be signed by either a country’s 
data-protection authority or by 
an individual whose data is be- 
ing transferred. 

The model contracts are be- 
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ing negotiated by European 
data-protection authorities and 
the Commerce Department, 
and a final version may not be 
ready until June, an agency of- 
ficial said. 

Plus, the contracts 
may turn out to be a less-desir- 
able option than the safe har- 
bor agreement because 
possible “that the standards 
will be tougher,” said Donald 
Harris, president of HR Priva- 
cy Solutions, a consulting firm 
in New York. D 


model 


it’s 





Safe Harbor Alternatives 


Companies that apply for safe harbor agree to give European 
Union residents certain data-privacy protections, including no- 
tice about how their personal information is used, the ability to 
limit disclosure of that information and access to the data. But 
that’s not the only option for complying with Europe’s laws. 


Others include: 


Model contracts: Contracts signed with European data- 
protection authorities. European authorities and the U.S. 
Commerce Department are negotiating a model contract. 


Individual contracts: Agreements reached between companies 
and individuals about data transfers. 


islation reaffirms existing tax 
law, he said. 

The key issue in the Internet 
tax debate concerns the collec- 
tion of sales taxes by remote 
sellers. Two previous Supreme 
Court rulings blocked a state 
from forcing remote sellers to 
collect those taxes unless the 
seller has a physical presence 
in the state. 

Even though the moratorium 
legislation has had no impact in 
that area, it nonetheless re- 
mains at the heart of the re- 
mote sales tax debate. Many 
states and brick-and-mortar re- 
tailers say what they want in 


any new moratorium legisla- 
| 





tion considered by Congress is 
language that supports the idea 
of a universal tax collection 
obligation for all sellers, pro- 
vided that the states simplify 
and reduce the administrative 
burden of tax collection. Thir- 
ty-one states are now working 
on a tax simplification project. 
As filed by Wyden and Cox, 
the legislation “falls far short 
of what we are looking for,” 
said James Goldberg, Washing- 
ton counsel at the North Amer- 
ican Retail Dealers Association, 
a Lombard, IIll.-based trade 
group that claims that the cur- 
rent sales tax system is unfair 
to companies with widespread 
brick-and-mortar locations. 
But others contend that the 





brick-and-mortar retailers are 
the ones that are seeking an 
edge in the tax debate. 

The “big-box” retailers such 
as Bentonville, Ark.-based Wal- 
Mart Stores Inc. “would prefer 
to load up the [pure-play online 
retailers] with as much admin- 
istrative burden as they can, so 
they can gain a competitive ad- 
vantage,” said Mark Nebergall, 
president of the Software Fi- 
nance and Tax Executives 
Council, a Washington-based 
association of software vendors 
and IT consulting firms that 
supports the moratorium on 
new Internet taxes. 

Meanwhile, eight states that 
were collecting sales taxes 
from Internet service provi- 
ders before the act took effect 
in 1998 were allowed to contin- 
ue to do so under the moratori- 
um’s grandfather clause. 

The collection of a sales tax 
isn’t keeping people from us- 
ing Internet services in Ten- 
nessee, one state that applies 
sales taxes on Internet access, 
said Gregg Harper, a regional 
manager at Duro Communica- 
tions Inc., a large, privately 
held access provider in Cassle- 
berry, Fla. Tennessee charges 
an 8.25% sales tax but doesn’t 
have an income tax. 

“We're thankful we 
have to pay an income tax yet, 
said Harper. D 


don’t 
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Nore Expects Las, 
Wil Cut 10,000 Jas 


Nortel Networks Corp. last week 
warned that it expects to report a 
first-quarter loss because of delays 
in spending by U.S.-based cus- 
tomers and said about 10,000 em- 
ployees will be cut from its work- 
force this year as a result of the 
lowered outlook. The Brampton, On- 
tario-based networking equipment 
vendor also sharply reduced its rev- 
enue and earnings growth projec- 
tions for the year. Nortel previously 
said both revenue and earnings 
were expected to increase 30% on 
an annual basis, but it’s now fore- 
casting growth of 15% and 10%, 
respectively (see page 10). 


Congress Addresses 
E-Commerce in Bill 

The National Institute of Standards 
and Technology in Gaithersburg, 
Md., will look at supply-chain, 
e-commerce-related interoperability 
issues faced by sma!l and medium- 
size businesses under a bill ap- 
proved by the House last week. The 
legislation would create an advisory 
panel to look at the challenges of 
integrating e-commerce technolo- 
gies as well as establish a grant pro- 
gram to help small businesses. The 
bill was sent to the Senate. 


Sun Developing P2P 
Program Language 


Sun Microsystems Inc. said it’s 
developing a Web-based program- 
ming language called Juxtapose for 
use by companies looking to build 
distributed peer-to-peer computing 
applications. Sun said its initial goal 
is to provide a simple code layer 
that software developers could use 
to write peer-to-peer applications 
with interoperability capabilities. 


Short Takes 


LM ERICSSON TELEPHONE CO. and 
IBM will join forces to deliver finan- 
cial services over wireless net- 
works. . .. HEWLETT-PACKARD 

CO. last week met lowered expecta- 
tions, announcing a profit of $727 
million on revenue of $11.9 billion 
for its first fiscal quarter, which 


























ended Jan. 31. 
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Automaker Drives 
Wireless in Plants 


Wireless technology is Ford’s first 
step toward build-to-order systems 


BY LEE COPELAND GLADWIN 
SANTA MONICA, CALIF 
ITING POOR coordi- 
nation between its 
production lines 
and its extensive 
supply chain, Ford 
Motor Co. last week outlined 
the business drivers for over- 
hauling its manufacturing 
plants with wireless networks 
that should allow workers to 
call in automotive parts orders 
from the shop floor. 

“We're trying to clean up 
our production lines,” said 
Jim Buczkowski, director of 
manufacturing and supply- 
chain at the Dear- 
born, Mich.-based auto giant. 
“If you pile up inventory all 


systems 


Continued from page 1 


Wireless 


issued a formal ban, but John 
Linz, acting director of the air- 
port’s IT division, said he 
would deny any requests for 
installation of wireless LANs 
or cellular phone microcell 
sites within the airport until 
BWI has a contract in place for 
a third-party provider. 

BWI took the step to prevent 
interference with air traffic 
control and security systems, 
eliminate signal interference 
between wireless LANs and 
maximize revenue. According 
to Mike Beeler, assistant vice 
president of business develop- 
ment at MobileStar Network 
Corp. in Richardson, Texas, 
maximizing revenue from 
phone-toting travelers who no 
longer use pay phones is an- 
other airport concern. 

“We had an installation in 
Atlanta [temporarily] shut 
down last year ... and in a 
meeting [there, we] were told 
[the airport operators] are los- 
ing $7 million a year in revenue 
from pay phones due to cell 
phone use,” Beeler said. 








over the place, its more difficult 
to control what's going on.” 

Controlling line movement 
and reducing inventory levels 
are top strategic initiatives for 
the nation’s No. 2 automaker, 
said Buczkowski last week at 
Forrester Research Inc.’s Auto- 
motive Summit here. 

But perhaps more impor- 
tant, Ford’s wireless overhaul 
is the first step in a broader 
technology drive that’s aimed 
at enabling build-to-order sys- 
tems through which vehicle 
manufacturing gets initiated by 
actual customer orders instead 
of by forecasting, he said. 

During the past two years, 
Ford has been implementing 
network called 


a wireless 


Dylan Brooks, an analyst at 
Jupiter Media Metrix Inc. in 
New York, said, “Every airport 
is trying to figure out how to 
get a cut of the revenue” from 
wireless, with the drop in their 
share of pay-phone revenue 
definitely playing a part in the 
decision to target wireless. 

Putting the same restrictions 
on public-access wireless LAN 
carriers and cell phone compa- 
nies “means wireless LANs 
will suffer,” Beeler said. That’s 
because wireless LANs, with 
their low power output, have 
to be in the airport, whereas 
cell carriers “can just put up a 
tower outside the airport” and 
still get adequate coverage, he 
added. 

Linz said generating revenue 
was part of BWI’s plan. But 
“we see this as a major safety 
initiative,” he added. Linz said 
a neutral third party, such as 
established aeronautical ser- 
vices company Arinc Inc. in 
Annapolis, Md., would better 
serve customers. 

Compounding the problem 
are the airlines, which are in a 
race to provide wireless Inter- 
net access for their customers. 
American Airlines Inc. in Fort 
Worth, Texas, last year signed 








e-Smart in 25 plants in the U.S., 
Spain and Belgium. E-Smart 
synchronizes in-plant parts re- 
plenishment activities on Ford’s 
production lines and inventory 
bays, and with its suppliers. 

When an inventory bin on 
one of Ford’s production lines 
reaches a minimum level, a 
line operator simply pushes a 
call button that’s located on 
either a piece of equipment or 
a nearby wall. 

This action sends a 2.4-GHz 
wireless signal that triggers a 
request to the parts maker for 
materials such as a fender or 
ball-bearing supplier, and to 
the plant’s internal inventory 
center. The system also sends 
periodic wireless updates to 
the network to help synchro- 
nize parts deliveries to both 
the plant and the assembly 
line. Ford tapped WhereNet 
Corp. in Santa Clara, Calif. to 


a deal with MobileStar to in- 
stall wireless LANs in 49 air- 
ports. Delta Air Lines Inc. in 
Atlanta is looking for a partner 
to deliver broadband wireless 
service at major hubs this year. 

There is concern that pub- 
licly managed airports can’t 
move fast enough for the air- 
lines. But BWI said it will 
award a contract for its wire- 
less LAN within three months. 

BWI’s intention to manage 
cellular phone installations 
caught that industry unaware. 
But a spokeswoman for New 
York-based Verizon Commu- 
nications said the company 
could serve airports with off- 
premises towers because “our 
technology has become more 
sophisticated.” 

Beeler said the cell phone 
carriers and the wireless LAN 
industry have more than BWI 
to worry about, with airports 
in Minneapolis, Detroit, Chica- 
go, Los Angeles, Nashville and 
Charlotte all in the process of 
defining policies to control all 
wireless communications, in- 
cluding cellular phones, at 
their facilities. D 





Reporter Michael Meehan con- 
tributed to this report. 
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No Wires 
Attached 


Ford’s e-Smart plan: 

= Ford has implemented e-Smart in 25 
plants in the U.S., Spain and Belgium. 

m A2.4-GHz wireless signal from inven- 
tory bins triggers a materials request 
such as a fender, to parts makers and to 
the plant's internal inventory center. 

aw Line operators can trigger the call but- 
ton; the system also automatically sends 
updates on its own. 

@ Santa Monica, Calif.-based Wherenet 
Corp. developed the infrastructure for the 
wireless tracking system 


develop the infrastructure for 
the wireless tracking system. 

Dan Garretson, an analyst at 
Cambridge, Mass.-based For- 
rester, said better management 
of information should help 
Ford and other major auto- 
makers have _build-to-order 
systems partially in place by 
2003. The wireless, real-time 
feedback from the line im- 
proves supply-side planning by 
reducing the wait time for new 
parts, he said. 

Detroit-based General Mo- 
tors Corp. is also moving to a 
build-to-order model. Execu- 
tives at the nation’s top auto- 
maker, which cut its inventory 
levels from suppliers by 10% as 
part of a cost-reducing mea- 
sure in December, cited the 
challenge of having to inte- 
grate its manufacturing plants 
and the parts shipping sched- 
ules of its suppliers as a major 
obstacle the company must 
tackle. 


Step in the Right Direction 

“We have to enable our back- 
end systems, the systems in the 
plant, from a lean manufactur- 
ing standpoint and line up 
our supply-chain pipeline and 
be more efficient,” said Mark 
Hogan, president of e-GM, 
the automaker’s business-to- 
consumer Internet unit. 

Thilo Koslowski, an analyst 
at Gartner Group Inc. in Stam- 
ford, Conn., said initiatives such 
as e-Smart bring automakers 
closer to their goal of tighter 
integration with their suppliers. 

“A lot of the communica- 
tion between suppliers and 
automakers is over the phone 
and with fax,” said Koslowski. 
“It’s a small improvement, 
but they still have to solve 
the big supply-chain planning 
problem.” D 
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Server can help users manage Web apps 


BY CAROL SLIWA 
ICROSOFT CORP. 
last week added 
to the founda- 
tion of its enter- 
prise 

array with the release to manu- 

facturing of Application Cen- 
ter, the last of the 2000 genera- 
tion of its .Net server family. 
Application Center 
available next month, aims to 
help users configure, manage, 


monitor and load-balance Web | 


applications built on the Win- 
dows 2000 operating system. 


“Now [Microsoft is] tackling | 


these tough technical prob- 


lems” in terms of what enter- | 
prise systems require, said John | 


Mann, an analyst at Patricia 


Continued from page I 


Windows 2000 


planning to roll out Windows 
2000 later this year,” said Mike 


Silver, an analyst at Gartner | 
Group Inc. “Some enterprises | 


really underestimated how 
much planning it was going to 
take. Some were under the Y2k 
hangover. They just weren't 
ready for such a project.” 
When the operating system 
hit the market last February, 
Gartner predicted that just 5% 
of Windows NT 4.0 servers 
would be upgraded to Win- 
dows 2000 servers over the 
course of last year. It forecast 
that the number would sky- 
rocket to 40% in 2001. “So far, 
we’ve found [those estimates] 
to be fairly accurate,” said 
Gartner analyst John Enck. 
Research firm IDC in Fram- 
ingham, Mass., reported late 
last year that while Windows 
2000 adoption was progressing 
faster than it expected, Win- 
dows 2000 Server was experi- 
encing “considerably slower 
growth” than Windows 2000 
Professional, the desktop oper- 
ating system. IDC noted that 
the trend was “not at all unex- 
pected,” since server migration 


software | 


2000, | 


Seybold Group Inc. in Boston. 


es when they build Web sites. 
Among the options, they can 
opt for large, scalable Unix 

oxes, or they can “scale out,” 
using more of the less expen- 
sive Microsoft servers. With 
the latter approach, companies 
are sometimes left with a man- 
agement challenge, 
| systems administrators typi- 
| cally have to tend to each serv- 





er in acluster separately unless 
| they have created or bought 
| special tools. 

Application Center was de- 
| signed to address that problem, 
enabling a company to manage 
a cluster of up to 12 servers as a 


single entity, said Microsoft | 


| “is not a move that most IT 
| managers make lightly.” 
| “What we're seeing is the big 
push for Windows 2000 is go- 
ing to come in the next six to 12 
months,” said Laura DiDio, an 
analyst at Giga Information 
Group Inc. in Cambridge, Mass. 

One area that will continue 
to lag, however, is Active Di- 
rectory deployment, DiDio 
predicted. A self-selecting sur- 
vey that Giga conducted with 
Clearwater, Fla.-based Sunbelt 
Software — which drew more 
than 1450 responses — 
showed that up to half of the IT 
professionals planning a Win- 
dows 2000 Server deployment 
this year are deferring Active 
Directory (AD) deployment 
indefinitely. Complexity and 
lack of trained IT staff were 
the chief reasons cited. 

“People are putting [Win- 
dows 2000] Workstation on 
desktops in droves, but none of 
the ones I’ve seen are imple- 
menting [Windows 2000] Serv- 
er with any seriousness. Most 
are horrified of AD, and rightly 
so. Look what NDS did to Nov- 
ell,” said Buck Woody, presi- 
dent of the Tampa Bay SQL 
Server User Group in Florida. 

“Active Directory is a big 
chunk for people to swallow. It 
involves domain reorganiza- 





Companies face many choic- | 


because | 





Pulliam. Firms with more 


of the clusters, he said. 


| servers in sync from a content 


and configuration standpoint 


using Windows NT 4.0 — par- 
| ticularly as site traffic spiked 
| during December and January. 


“We would take one of the 


| servers off-line and essentially 


| clone it, 


Liu said. “But we 


| would have to do it when the 
technical product manager Bob | 


| servers can use a staging server | 
| to deploy applications to each | 


“It is a limitation today,” said | 


John Enck, an analyst at Gart- 
ner Group Inc. in Stamford, 
Conn. “But I expect to see this 
product grow up in subsequent 
releases. I can’t share the road 


product.” 
Yi Liu, an IT manager at San 
Francisco-based Embark.com 


machines were in a _ stable 
state, when we weren’t making 
any configuration or content 
changes. Since we’re constantly 
making changes, we would have 
to scale up ina very short time.” 

Now changes need to be 
made only in one place, since 
servers in a cluster are treated 
as a single entity. That also eas- 


| es monitoring of the Web envi- 
map, but it’s pretty impressive. | 
Microsoft is investing in this | 


Inc., a network infrastructure | 


company catering to online 
higher-education admissions, 


said his company is already | 


seeing benefits, operating with 


less staff because of Applica- | 


tion 


had problems keeping 


tion. I haven’t seen a 
companies move to Active Di- 
rectory yet,” said independent 
consultant Bill Zack, the presi- 
dent of the New York Win- 
dows NT/2000 User Group, 
which has about 700 members. 
Two user groups, in Char- 
lotte, N.C., and Portland, Ore., 
didn’t fit that pattern. Both re- 
ported that a majority of mem- 
bers had completed Windows 
2000 client and server migra- 
tions and are using Active Di- 
rectory in production. 
Companies that made the 
switch to Windows 2000 have 


lot of 


Center. Liu said Embark | 
its | 





App Center Details 


>Runs on Windows 2000 
Server and Windows 
2000 Advanced Server 


»Priced at $2,999 per 
processor 


>General availability next 
month 
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ronment. In the past, Embark 
used a third-party product and 
defined monitors for each ma- 
chine individually. Now staff- 
ers can set up monitoring at 
the clustering level, which has 
helped them expand the scope 
of the monitoring they do and 
automate tasks to correct 
problem conditions. 

With help from Application 
Center, Rosemont, IIl.-based 
Galileo International _ Inc., 
which provides electronic dis- 
tribution services for the travel 
industry, can now test applica- 
tions on staging servers before 
launching them into produc- 
tion, according to consulting 
engineer Justin Mette. 

Beltsville, Md.-based Digex 
Inc., a managed-hosting pro- 
vider for large enterprises, 
said Application Center will 
help customers design sys- 
tems without single points of 
failure. “When one box goes 
down, we can put a new one in 
place and make this one look 
like the others in the cluster, 
and it will automatically be 
configured,” said senior man- 
aging engineer Scott Turner. D 





| cited performance gains, said 


| 
| 
| 
| 





Peter McKiernan, chairman of 
the New York E-Commerce 
Users Group and vice presi- 
dent of Stratis Group Inc., a 
consultancy in Murray Hill, N,J. 

“The lowest we’ve seen is a 
20% increase in performance,” 
McKiernan said. “So most of 
our dot-com customers have 
made the migration to Win- 
dows 2000 at this point. The 
upgrade process is pretty 
straightforward.” 

Desktop migrations have 
lagged while many companies 
wait for the first Windows 





2000 Service Pack. “Corpora- 
tions don’t jump. They move 
deliberately,” Zack said. 

Many users predicted that 
corporations also won't bite at 
the upcoming Windows XP 
client, formerly code-named 
Whistler, which Microsoft un- 
veiled last week. 

Bradley Dinerman, presi- 
dent of the Boston Area Ex- 
change Server User Group, 
said most of his organization’s 
186 members are “focusing 
their energies” on Win 2k and 
“are not looking much further 
ahead than that.” D 


XP Aimed at Consumers 


The new Windows XP operating system 
that Microsoft Corp. showed in Seattle 


last week targets consumers. 


The upgrade is Microsoft's first oper- 
ating system geared toward consumers 
that uses the same code base as Win- 


dows 2000, which the company aims 


at corporate users. 


welcome 





Chris Le Toca, an analyst at Gartner 
Group Inc. in Stamford, Conn., said, 
“There’s not a lot for IT here. There’s 
no reason to delay Windows 2000 
deployments because of this.” 

Windows XP will ship in the second 
half of the year. Pricing hasn’t been set. 

- Mark Hall 
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Windows 2000 
At One Year: 


After a year of cautious testing and planning, 
many users are just beginning major deploy- 
ments of Windows 2000. By Robert L. Mitchell | 


YEAR AGO, a survey of Computerworld readers 
found that the No. 1 thing they wanted from Win- 
dows 2000 was stability — no more blue screens 
of death. Now, on the operating system’s first an- 
niversary, IT managers agree that Microsoft has 
delivered on its long-overdue promise of reliability. 
So today, after a year of tire-kicking, many IT 
managers are finally ready to begin production 
rollouts this year. Some are migrating eagerly to 


Windows 2000, some warily 


and some are doing it only because they have to. 


Penn National Insurance, 
for example, is just preparing 
to roll out Windows 2000 on 
its servers and desktops. But 
Jane Koppenheffer, CIO at the 
Harrisburg, Pa.-based insurer, 
says it wasn’t the promise of 


higher reliability that clinched | 


the decision. 

“We are rolling out an imag- 
ing application that requires 
Windows 2000,” she says. “If 
not for the external pressure 
from the application ... we 


would probably not be moving 


as fast as we are today.” 

That kind of pragmatism — 
and the complexity of deploy- 
ing the new operating system 


— are behind Windows 2000's | 
slow march into the enterprise | 


since its launch last February, 
say users and analysts. 

IT managers who have 
worked with Windows 2000 
— in test beds, in partial de- 
ployments and in full produc- 
tion rollouts — confirm that 
reliability has improved sub- 
stantially. They’re also experi- 
encing better uptime due to 
improved handling of device 
drivers and dynamic link 
libraries and fewer adminis- 
trative system reboots. The 
introduction of the Active 
Directory (AD) service has 


eased some administrative 
headaches, IT managers say. 

But implementing AD has 
been daunting. At a New York 
Windows NT/2000 users 
group meeting, Computer- 
world surveyed 70 IT profes- 
sionals who came to hear a 
Microsoft Corp. consultant 
speak about AD. While more 
than half said they planned 
production deployments of 
Windows 2000 this year, only 
six anticipated having AD in 
place this year. 

IT managers would like to 
see better tools for planning 
and managing AD, more de- 
vice drivers and better mid- 
dleware tools for moving data 
between Windows 2000 and 
other systems. And users still 
have concerns about whether 
Datacenter Server, Microsoft's 


enterprise version of Windows 


2000, is stable and mature 
enough. 

Users agree that this is the 
most reliable Windows to 
date. “Stability and reliability 
will be the two biggest gains,” 
says Koppenheffer, who sup- 
ports about 50 home-based 
users running Windows 95 
and 98. She plans to begin mi- 
grating users this month. 

Scott Newton, IT director 





especially since key tools are immature — 


at baked goods company Otis 
Spunkmeyer Inc. in San Lean- 
dro, Calif., rolled out Windows 
2000 on more than 600 work- 
stations and 16 servers at 63 
offices nationwide. He said he 
has seen a dramatic reduction 
in laptop support problems. 
“Before deployment, laptops 
were a large part of our sup- 
port. After deployment, those 


| calls were reduced to simple 


things like ‘I can’t dial in.’ The 
support time on calls has dra- 
matically decreased,” he says. 


"Mobile Stability 


In addition to reliability and 
management improvements, 
Newton and others say they 
like the new features such as 


servers worldwide. 
Initial users of Win- 
dows 2000 Advanced 


features also give the 

product good marks. John 
Loo, director of systems, net- 
work and engineering at Los 
Angeles-based television net- 
work E Entertainment Televi- 
sion, says, “We purchased a 
system dedicated to testing 
clustering, and so far, we've 
found no problems that 
haven't been documented.” 

He adds that on the client 

side, Device Manager (an ap- 
plet that configures system 


hardware) “is a lot more stable 


and a lot more reliable. It 
seems to be smarter.” 


High End 


Dave Maxey, systems man- 
ager at Hoffman Estates, IIl.- 
based Sears, Roebuck and Co., 
says he hopes to use Datacen- 
ter Server’s multiprocessing 
and clustering technologies to 
consolidate 67 OS/2 file and 


print servers onto two servers. | 


“We spent most of the year 
in a pilot mode,” he says. “We 
think that Datacenter Server 
will give us the most bang for 
the buck and take a lot of 
complexity out of the environ- 
ment.” Sears also plans an 
“infrastructure refresh” that 
will replace about 30,000 NT 
Workstation clients with new 
machines running Windows 


| 2000 Professional, starting 


this quarter. 
Application compatibility 


| has also been good, but the 


required testing takes time. 


| Carbone has extensively 


the Offline Files, a remote data | 


replication capability that 
replaces the less-stable Brief- 
case applet. 


“We have quite a few mobile | 


users,” says James Carbone, 
manager of IT infrastructure 
at New York-based Credit 
Suisse First Boston. “The 
biggest advantage is that you 
can disconnect from the net- 
work without having to shut 
down.” Carbone is in the 
process of migrating more 
than 22,000 Windows NT 4 
workstations and 3,000 NT 


tested Windows 2000 with a 
few hundred applications, as 
well as Citrix Systems Inc.’s 
MetaFrame and storage-area 
network systems, and says, 
“It’s looking pretty solid.” But 


| that’s only in the lab. “When 


you put it out in production, 
that’s when you face the 
issues,” he explains. 

Newton says it was the 
administrative benefits that 
drove him to migrate to Win- 
dows 2000 — a process that 
he started last February and 
concluded in June. “We’ve 
been able to cut down support 
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staff because of the central- 
ized management of the 
servers,” he says. 

Newton cites the ability to 
remotely deploy new users 
and to use group policies to 
restrict users’ ability to change 
the system configuration — 
something he never attempted 
under Windows NT because 
of the awkwardness of policy 
management under the NT 
domain model. 

“You didn’t have that capa- 
bility in NT 4 without going 
into the policies within the 
domain. It was more cumber- 
some. It wasn’t worth it,” 
Newton says. 

Both reliability and perfor- 
mance led Bernard Gay, vice 
president of enterprise tech- 
nology and operations at Mia- 
mi-based Royal Caribbean 
Cruises Ltd. to upgrade the 
company’s two Web servers 
from Windows NT. “We've 
converted our booking en- 
gines on our Web servers and 
our back-end servers using 
Windows 2000 and SQL 
Server 2000,” he says. “On the 
Internet Information Server 
side, we saw performance 
gains of 20% to 30%.” 

Unlike with Windows NT, 
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* announcing a host of new products that extend and build on the new operating system. 

APRIL 1999 FEBRUARY AUGUST 
2000 2000 
@ Windows 2000 @ Windows 2000 mEx 
Profe nal Beta 3 Profe work 


Qi 2001 Q2 2001 2ND HALF 
2001 


ler Beta 1 dlication Center ® Mobile Informa aW 


SEPTEMBER 
2000 


NOVEMBER DECEMBER 
2000 2000 
e 2000 
next major release 
of Windows 2000 
rst applic 2nd of Win9x li 
require Window 
2000 and 64-bit version 
w BizTalk Server 
2000: XML-based 
@ Host Integratior 
Server 2000 
integration with olde and Acceleration 
Server 2000: Fire 


host system 


Gay says, “the servers just 
don’t crash,” and he “doesn’t 
run into memory contention 
issues as much.” He says he 
plans to deploy Windows 
2000 on more than 5,000 
clients and 400 servers over 
the next two years. 


Needs Improvement 

Windows 2000 certainly has 
plenty of areas for improve- 
ment. Some users say they’re 
still waiting for device drivers 
for printers and other hard- 
ware. And while Newton will 
use Windows 2000 for file and 


print services, he hasn't put 
core applications on it. 
“Putting our company on 
that for our main system — it’s 
a little bit scary,” he says. He 
plans to move to a new enter- 
prise resource planning sys- 
tem but is cautious about 
moving it off his AS400. New- 
ton is interested in the multi- 
processing and load-balancing 
capabilities of Datacenter 
Server, but he feels it’s too 
early to commit. “We are a 
year and a half off from people 
developing the applications to 
reap the benefits,” he says. 


wall, Web caching 


Users can only buy Data- 
center Server bundled with 
system hardware from quali- 
fied vendors, which tend to 
offer it only on pricey, high- 
end systems. That makes test- 
ing the new operating system 
expensive, says Credit Suisse’s 
Carbone, who is considering 
Datacenter Server for disaster 
recovery and business conti- 
nuity applications. 

“We would like to see a 
better middleware integration 
component,” says Gay, who 
has many custom-developed 
applications and an IBM AS 


SCOTT NEWTON at Otis 
Spunkmeyer implemented 
Windows 2000 on more than 
600 workstations, with 
dramatic results. 





400 system running a DB/2 
bookings database that must 
work with a Windows 2000 
Web server and an SQL Server 
2000 customer database. 

“We have had to search high 
and low to find tools that 
move information between 
systems,” he says. And “if 
you're planning on writing 
applications and you're not a 
homogenous [Microsoft] 
environment, there are some 
roadblocks when it comes to 
compatibility.” 


Directory Snags 

Perhaps the most complex 
part of deploying Windows 
2000 is creating and maintain- 
ing AD, an area in which users 
say more work is needed. 
Newton, for example, says he 
would like to see better tools 
for managing AD. 

“You can find a device name 
now, but it doesn’t tell you 
what container it’s in, and you 
don’t know where it is. It 
would be nice to have some 
simple reporting tools,” he 
says. Newton is aware of third- 
party tools from companies 
like Santa Clara, Calif.-based 
NetIQ Corp. but says that 
some basic functionality 
should be included. 

Penn National Insurance is 
struggling with its AD design, 
which won’t come out until 
after the server rollout begins. 
“We're not a large organiza- 
tion or a small organization. 
We're caught in the middle,” 
Koppenheffer says. 

Dan Kusnetsky, an analyst at 
Framingham, Mass.-based 
IDC, agrees. “It’s hard work to 
get AD set up the way they 
want it to be set up, and the 
[management] tools are primi- 
tive at this point,” he says. 

For Sears’ Maxey, the issue 
is creating an AD that can sup- 


port upward of 30,000 users 
while maintaining compatibil- 
ity with the existing directory 
system. “We’re working with 
other organizations to create 
an Active Directory to apply 
in all locations and that will 
integrate with our iPlanet 
LDAP [Lightweight Directory 
Access Protocol] on our Sun 
server in the distributed data 
center,” he says. 

So far, the native tools for 
AD have been adequate, but 
Maxey cautions that Sears is 
just starting the process. 

Others are less impressed. 
“Today, you can’t back out an 
[AD] schema modification 
(that defines attributes for 
classes of objects in the 
directory],” says a Windows 
2000 project manager at a 
financial services company 
in the Pacific Northwest who 
declined to be named. “It 
bothers me that you can’t 
take that out.” He also wants 
better tools for group policy 
management. 

“There’s no good way to 
search for a group policy that 
does what you need,” he says. 
“You have to go through all 
800 of them. There needs to 
be search tools.” 

Finally, users would like 
see more best practices and 
tools for managing migrations. 
Carbone notes that upgrading 
desktops and servers at Credit 
Suisse is no small undertaking. 
“The only thing that’s drasti- 
cally reduced is the scripting 
to get the applications down 
onto a workstation,” he says, 
although “going from Win- 
dows NT 3.5 to 4.0 was much 
more painful.” 

Whistler, the next produc- 
tion release of Windows 2000, 
promises several new features 
on the desktop and server. 
The client, now called Win- 
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| al, says Windows XP’s new 
| help desk functions could be 


“a huge benefit for us,” but she 
isn’t holding off on Windows 
2000 Professional. As for 
64-bit computing, the applica- 
tions will drive the decision. 

“Most of our vendors indi- 
cated that 32-bit is where 
they’re going to stay for the 
foreseeable future,” Koppen- 
heffer says. 

E Entertainment is already 
running its Web site on 64-bit 
Unix and is interested in what 
Whistler has to offer. But Loo 
is taking a wait-and-see atti- 
tude. “We will have to eval- 
uate it and see if it fits our 
business,” he says. 

Still, Whistler will be a key 
turning point for Windows 
2000, says Tony Iams, an 


| analyst at Port Chester, N-Y.- 


based consulting firm D.H. 
Brown Associates Inc. “The 


| only thing that makes a system 
| truly robust is maturity. 
| They’ve put a lot of new func- 


tions into Windows 2000 — a 
lot of new code,” he says. And 
as the next production release 
of Windows 2000, “It is an im- 
portant breakthrough because 
you will have a more mature 
product,” he adds. 
Nonetheless, the stability of 


| Windows 2000 is an improve- 
| ment on NT 4 and a big leap 

| over Windows 98 on the desk- 
| top, users say. And that, for 

| some users, is reason enough 

| to move forward. D 


| 








Windows 2000 


Pros and Cons 
What users like . . . 


= Greater reliability 

= More uptime due to fewer 
administrative reboots 

= More efficient, centralized 
management using Active Directory 
# Ability to consolidate servers 


using clustering and multiprocess- 
ing features of Datacenter 


. ..and what they don’t 


= Complexity of building an Active 
Directory 

= Application compatibility testing 
process is slow 

® Limited tool set for creating and 
managing the Active Directory 

= Some device drivers are still 

not available 

= Few middleware tools for migrat- 
ing data between Windows 2000 
and other systems 

















Do you really know what goes on in the minds of 
your e-customers? What they might be thinking 
about buying? Or not buying? And why? That’s 
where you need e-Intelligence from SAS. With 
e-Intelligence, you can quickly integrate bricks- 
and-mortar data with clicks-and-mortar data. To 
reveal insights that can help you optimize online 
merchandising, recognize cross-selling opportuni- 
ties, build greater customer loyalty, and establish 
more profitable relationships with your very best 
e-customers. To learn more about e-Intelligence 
from SAS, and what it can do for your business, 


phone 1-800-727-0025 or stop by www.sas.com. 


The Power to Know. SdS. 
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THE FABLED FIVE NINES. ELUSIVE, COVETED, 


For a server operating system, the five nines are a measure of reliability that translates into just over 
five minutes of server downtime per year.* Of course, rumors of this 99.999% uptime usually start 
under ideal lab conditions. But where are these five nines when your company needs them? If you’re 
using Microsoft® Windows® 2000 Server-based solutions, they may be closer than you think. Today 
Starbucks, FreeMarkets and MortgageRamp, an affiliate of GMAC Commercial Mortgage, are using 
™ Windows 2000 Server-based systems that are designed to deliver 99.999% server uptime. With 
BP | Windows 2000 system architecture improvements for higher server uptime plus fault-tolerant and redundant systems 
Server Famity for increased availability, the Windows 2000 Server platform is helping these companies maximize 


ts depend factors outside of the operating system, including other hardware and software technologies, mission-critical operational processes and professional services 








AND CLOSER THAN YOU THINK. 


uptime and minimize network interruptions. But a server OS alone doesn’t get you five nines, which is 
why we’ve teamed up with industry-leading system providers to ensure that the right combination of 
people, process and technology is utilized. Industry leaders such as Compaq, Hewlett-Packard, Unisys, 
Stratus and Motorola Computer Group can work with you to deliver solutions with up to five nines uptime 
with their custom-built Windows 2000 Servers shipping today. Of course, not all installations require this 
level of reliability, but one thing is for sure: The Windows 2000 Server family can help you get to the level 
of reliability you need, even five nines. To learn more about server solutions you can count on, visit 
microsoft.com/windows2000/servers Software for the Agil siness 








Microsoft Names New 
President and C00 


Microsoft Corp. last week named 
Rick Belluzzo, a former CEO of 
Mountain View, Calif.-based Silicon 
Graphics Inc. and a Hewlett-Pack- 
ard Co. veteran, as its new presi- 
dent and chief operating officer. 
Belluzzo, 47, succeeds retiring COO 
Bob Herbold, 58, who will stay on 
part time as a liaison to industry, 
government and customers. Belluz- 
zo joined Microsoft in late 1999. 


SAS President Steps 
Down After 6 Months 


Data analysis software vendor SAS 
Institute Inc. confirmed last week 
that its president and chief operat- 
ing officer has resigned after only 
six months in that job. Andre 
Boisvert’s departure comes on the 
heels of the resignations of two oth- 
er senior employees in the past 
month. Boisvert was originally hired 
last February to handle investments 
and acquisitions at Cary, N.C.- 
based SAS. He was promoted to 
president in September, taking over 
much of founder, Chairman and 
CEO Jim Goodnight's responsibili- 
ties and heading an effort to go 
public that was started several 
years before. 


Short Takes 


EMC CORP. confirmed it dismissed 
hundreds of workers earlier this 
month, but the Hopkinton, Mass.- 
based storage vendor said the move 
was part of a stringent and ongoing 
employee review process that 
doesn’t necessarily involve reducing 
internal costs. EMC officials would- 











n't specify the number of employees | 


beyond saying that “several hun- 
dred” workers lost their jobs. . . . 
San Francisco-based RIVERSOFT 
TECHNOLOGIES LTD. has entered 
into an agreement with CISCO SYS- 
TEMS INC. under which it will sup- 
ply San Jose-based Cisco with a 
tailored version of RiverSoft Fault 
Manager software. The software 


will provide mobile wireless network | 


management functionality to Cis- 


co's 2.56 and 3G network offerings. | 


... Houston-based BMC SOFT- 
WARE INC. announced its acquisi- 
tion of PERFORM SA, a French 
Web-based network optimization 
software developer. 
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‘Virtual Close’ Fails 
To Work for Cisco 


Wall Street slaps Cisco for missing 
forecast as accounting process falters 


| BY JAMES COPE 


NVESTORS CLOBBERED 
networking powerhouse 
Cisco Systems Inc. earli- 
er this month, driving 
the company’s stock 


| down 16% when Cisco missed 


analysts’ earnings forecasts by 
a penny for the second quarter 
ended Jan. 27. 

It’s usually the other way 
around. 

San Jose-based Cisco typi- 
cally beats Wall Street esti- 
mates by 1 cent, in part by us- 
ing an accounting process that 
company President and CEO 


| John Chambers calls the “vir- 


tual close.” That process, ac- 


| service provider mar- 
ket,” Chambers said. 





cording to Chambers, enables | 
| the company to keep such 
| close tabs on its financials that 


it’s able to close its books in a | 
matter of hours and, when nec- | 


| essary, make quick course cor- | 
| rections to enhance earnings. 


So why didn’t it work this | 


time? 


Chambers said that while 


the virtual close lets Cisco look 
at the financial state of the | 


company on a daily basis, it 


| doesn’t allow it “to predict the 
| future.” 
| true, he said, when dealing | 
| with 


That’s particularly 
macroeconomic trends, 
such as the current rapid slow- 
down in the overall economy. 


| which continued throughout | 
much of January,” Chambers | 


said, adding that se- 
quential growth of 4% 
from the first quarter 
to the second quarter 
was somewhat trou- 
bling too. 

“The challenge [in 
growth] was primarily 
in the U.S. alternative 


Alternative service 
providers include 
companies such as 


emerging competitive local ex- | 


change carriers that compete 


with the regional Bell operat- | 
| But compared with Brampton, 


ing companies. 
Ironically, the service pro- 


| vider segment is where Cham- | 


bers said he believes Cisco will 
realize most of its planned 30% 
to 50% annual growth rate. 
And it’s that very focus that 


may adversely affect Cisco’s | 


Key Executive 


BY MARC L. SONGINI 

SAP AG last week confirmed 
that the president of its U.S.- 
based subsidiary has resigned, 


| although the German software 


“We started to see some ini- 
tial softness [in product sales] | 


the second week in December, 


Even a slight 
deviation from 
expectation 
is more than 
the market 
can stand. 


MICHAEL SPEYER, ANALYST, 
THE YANKEE GROUP 


| Pa., said Chris Larsen, who had | 


vendor didn’t disclose any spe- 
cific details surrounding his 
departure. 

A spokesman for SAP Amer- 
ica Inc. in Newtown Square, 


| been president of that unit 


| since late 1999, resigned “to | 
| SAP’s mySAP.com 


| pursue other opportunities.” 


SAP America CEO Wolfgang | 
Kemna is assuming Larsen’s | 


| duties, the spokesman said, 





adding that SAP users should- 
n't notice any difference in 
their dealings with the compa- 
ny during the transition. 
Larsen is the latest in a string 
of high-level executives who 
have left SAP America within 
the past few years. For exam- 
ple, former CEO Kevin McKay 
resigned from the subsidiary 


| Cambridge, 


CEO CHAMBERS: 
Service provider 
market is where 
Cisco will grow. 








historical ability to change di- 
| rection on a moment’s notice. 


Jim Slaby, an analyst at Giga 
Information Group Ine. in 
Mass., said the 
time required to close a big 
sale on network equipment to 

service providers 
may be as long as 18 
months. That’s three 


times longer than a | 
typical sale to a cor- | 
and the Asia-Pacific region, he 


porate user, he said. 

Moreover, selling 
to service providers 
isn’t as predictable as 
selling to business 
users, because there’s 
a lot more competi- 
tion in the service 
provider segment, ac- 
cording to Slaby. 

Cisco is well entrenched in 
the enterprise space, he added. 


Ontario-based Nortel Net- 
works Corp. and Murray Hill, 
N.J.-based Lucent Technolo- 
gies Inc., Cisco is still a new- 


| comer to the service provider 


market. Slaby also noted that 
dozens of start-ups are clamor- 
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| ing for a piece of that pie. 


Although Cisco’s earnings 


| may have been off a penny per 


share from Wall Street expec- 


| tations, the networking com- 


pany certainly isn’t struggling. 
Cisco reported Feb. 6 that 

net sales for the quarter were 

up by 55% at $6.75 billion, com- 


| pared with the $4.36 billion re- 


ported for the same period last 
year. And pro forma net in- 
come was $1.33 billion for the 
quarter, up 48% from the same 
period last year. 

Chambers said the company 
could see a couple of soft quar- 
ters in the future. But as long as 
recessionary pressures in the 
U.S. don’t migrate to Europe 


said, Cisco should continue to 
enjoy a 30% to 50% annual rate 
of growth during the next five 
years. 

Wall Street reaction isn’t 
necessarily _rational, said 
Michael Speyer, an analyst at 
the The Yankee Group in 
Boston. 

Cisco is subject to economic 
slowdowns just like any other 
company, he said. “And even a 
slight deviation from expecta- 
tion is more than the market 
can stand,” said Speyer. D 








MORE 


For more on Cisco and the challenges it's 
facing, see page 28. 





Resigns From SAP America 


last spring and eventually took 
a job at Mercator Software Inc. 
in Wilton, Conn. 

After Larsen became presi- 
dent, SAP America launched a 
major reorganization of its 


sales and service operations in | 


what he said was an at- 
tempt to make them 
more “proactive” in 
dealing with users. 
Larsen also oversaw 
the U.S. rollout of 


suite of Web-enabled 
applications. 

Bruce Richardson, 
an analyst at Boston- 
based AMR Research 
Inc., said Larsen’s exit wasn’t 
particularly surprising. SAP 
wanted a German executive to 
run SAP America and tapped 
Larsen as president primarily 
as a gap-filling move, Richard- 
son said. “They needed some- 
one to stabilize the sales force,” 


LARSEN: Goal 
was to stabilize 
sales force. 





he added. “Once that hap- 
pened, they didn’t need a co- 
president [anymore].” 

But Joshua Greenbaum, an 
analyst at Enterprise Applica- 
tions Consulting in Daly City, 
Calif., said Larsen’s departure 
could be unsettling to 
some of SAP’s users. 
“This is a time when 
SAP needs to be firmly 
in control and show a 
unified front, and it 
would be better not to 
lose this kind of senior 
person,” Greenbaum 
said. 

He added, though, 
that Kemna still gives 
SAP America a strong upper- 
management presence. And 
SAP seems to be doing well, 
from an overall U.S. sales per- 
spective, according to Green- 
baum. “This does not indicate 
some inner rot at the core of 
the company,” he said. D 











The bridge between 


our investment in IT infrastructure is 

huge. And the impact of the Internet on your 
IT budget grows larger every day. You've poured 
tons of resources into ERP systems as well as 
e-mail and document workflow systems. How 
much? Well, studies show that as much as 
50% of an average IT budget can be involved with 
managing documents 

_! True, there are more documents online than 
ever before. But it’s also true that we are creating 
more paper documents than ever before: twice as 
many as just five years ago. The reason is simple 
Most companies have lots of off-ramps that turn 
electronic documents into paper documents, but 
almost no one has lots of on-ramps capable of 
converting paper documents into electronic ones. 

_! In fact, giving you new ways to leverage your 
IT investment by bridging the frustrating gap 
between the paper world and the electronic world 


is exactly what the Xerox Document 


| pape world ane 


_I For starters, a Document Centre lets 
people work the way they are used to 
working—you can scan documents in the same 
place you print or copy them—it's that easy and 
that accessible. Of course, the Document Centre 
gives workgroups of 10 or more desktop control 


over everyday functions like printing, copying, 


XEROX 
DOCUMENT CENTRE 


Print 


PC faxing and 
finishing. What's 
more, by making 
document imaging 
an “everyday” 
function, the 
knowledge and 
information 
recorded in paper 
documents can now 
become a seamless 


part of the digital workflow. 


Ready to scan your job. 


Centre system was designed to do 


It 's about document 
UnAagung lor 
every workgroup. 


If scanning is on your radar at all, 
you probably see it as limited to 
environments with dedicated 
operators. And so it has been. 
But the Document Centre system 


is changing that in big ways 





IS NOW open 


C 1. \ 
Can directly to the Web 


tual | 
or Virtually anywhere else 


You want to. 


Going out to the hallway and scanning large 
documents into the digital stream at up to 65 ppm 
is certainly efficient, but the important question 
remains: Where is all that information going, and 
what can you do with it once it gets there? 

_i Document Centre lets you scan directly to 
industry-standard messaging and collaboration 
platforms 
like 
Microsoft 
Exchange, 
Lotus Notes 


or Domino.Doc. 


2 Select destination 


_] You can —— 


3 Press green button 


scan directly to a Web 

repository, so anyone has instant 

access to information from a remote location. 
| Scan to your 

PC desktop, and with 

OPEN 


ARCHITECTURE 
SYSTEMS 


Microsoft 
Windows NT 4.0 & 2000 
Document Centre, Appletalk 

Novell NetWare 4.X 

PCL6 
Token Ring 14/16MB 

TCP/IP 

OS/2 WarpServer 
Ethernet 10/100 
Adobe PostScript 3 


ScanSoft PaperPort and 
TextBridge software 


bundled with 


you can drag and 
drop your scanned 
image into any one of 
150 industry-standard 
applications. You 
won't need to re-key 


your documents. 


Scan 65 ppm 


_1 Select scan folder _ 


jor Fusiness. 


_! Or scan documents to the network, and 
using software like Xerox DocuShare, users can 
access them through any current Web browser on 
any platform. It gives you an electronic file cabinet 
that's a very efficient way to share knowledge and 
dramatically reduces e-mail traffic 

_! Or combine Document Centre with Xerox 
FlowPort. FlowPort is a Web- : 
based software platform that 
manages the flow of 


documents from paper to 
Microsoft Exchange 


digital and back again in Public Folders 


dramatically new 
ways. For example, 
FlowPort gives 
mobile workers 
the freedom to 


access and print 


any documents on the 
Web without using a PC. 
Lotus 
_] And when it comes Domino.Doc 
to getting your digital 
PC Desktop 


major industry printing standards and encourages 


documents back into paper 
form, Document Centre's 


open architecture supports all 


third-party software solutions to thrive. So you can 
print not only from your desktop or from the Web, 
but also directly from your mainframe, including 
ERP applications like SAP 

_ In short, things once limited to paper 
are electronically archived, accessed, shared 
and easily printed wherever you need them. 
It doesn't just increase productivity, it decreases 
costs and saves time. Turn the page to learn how 


one of our customers is already benefiting. 





gital, it s about solutions that leverage the network. 


We have hundreds of customers who report impressive results. But here’s one in-depth story of 


how a Document Centre solution reduced one organization’s work-cycle time from three days to 
just three minutes 


The Customer: Now when people need a document, they just 

Center for Technology Management, in a check off the file they need on a FlowPort cover 

prominent Midwestern research institute sheet, scan it into the Document Centre, and 
FlowPort software finds and sends the 

The Problem requested electronic file to a server that can 

There are dozens of huge file cabinets over- print, e-mail or store the document. What's 

flowing with documents—patents, notes and more, once the file is stored, DocuShare lets you 

contracts about inventions the university owns manage it on the Web, giving authorized users 

Each year up to 1,500 new folders are added instant access for viewing, downloading and 

Every day, dozens of people call and request printing documents from anywhere at any time 

files. By law, the university must provide public 

access to any of these thousands of complex 

scientific documents for reference, revision, A process that used to take three days can 

notation or collabo- - § now be completed 

ration. And it must & és instantaneously 

be done for 25 years . Documents are 

The commitment of accessed and 

time, space and shared electronically 

personnel is large Paper is eliminated 

and growing while collaborative 


work processes are 


Oe RE x. 


The Solution 


made simpler 
Combine Xerox 


Security is improved. 
Those 20 file 
cabinets are soon 


FlowPort and 
DocuShare with two 
Document Centres 

history. Costs 
This gives you a 

are lowered 
search engine for all 


Time is saved 
your documents ‘ 


Une OY Off, WS abou umpter Way To snare knowledge. 
In a world of intranets and extranets, of e-commerce and the Internet, you need state-of-the-art 
technology and expertise to manage and share the documents that contain the knowledge in your 
organization. The Xerox Document Centre is a digital platform engineered from the ground up to 
eliminate the barriers between your paper and online documents. 
Call us or visit our Web site for more information. And see how much you can increase productivity 
and control cost just by getting all your company’s documents online 


xt. online | IG e 
| THE DEL MENT Company 
rox.com/online XEROX 
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Storage Networking World® — User Strategies and Solutions 


7 Coonned & 
STORAGE | « Storage Networking World’, an alliance between the SNIA and Produced by: 


NETWORKING Computerworld, promotes access to the latest information on storage 
solutions for users, implementers and vendors. 


¢ Aconference program featuring industry leaders, exciting panels, 
informative sessions, analyst updates, tutorials, and a multi-company 
Interoperability Lab. 


¢ Package includes an Expo (solution showcase), meals, receptions, and 
a complimentary (for users and implementers) golf outing. 


¢ Register now for early-registration discount. 


For more information about Storage Networking World® or to register, visit 


www.computerworld.com/snw 
or call 1-800-883-9090 
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Product Quicktake ebiz©® 


Spotlight on ProActivity for Business Process Discovery, 
Optimization and Management 


usiness process integration and manage- 
ment are becoming critical to e-business 
success. e-Business requires companies 
to shrink business cycles to respond quickly to 
new competitive threats and opportunities 
Sustainable competitive advantage in the e- 
business age requires continuous innovation, 
which in turn requires an intense focus on 
analyzing business processes and the impact of 
change 
ProActivity is the first tool we have seen that 
reduces the skills and time required to discover 
business processes. More important, it reduces 
the time that business experts need to be 
involved 
Organizations can benefit from using 
ProActivity in a number of ways. When used for 
defining integration requirements, ProActivity 
automatically creates the business process maps 
Organizations will gain maximum business 
benefit and long-term competitive advantage 
from ProActivity by investing in enterprise 
process management. This requires dedicating 
resources to become experts in using the tool 
and working with business managers to define 
processes. Benefits will also accrue from the 
ongoing management of the process library by 
enabling reuse of models and analysis of the 
impact of business change. When ProActivity is 
used across the enterprise, organizations will 
gain insight into optimizing and innovating their 
business process and managing continuous busi- 


ness change 


Product Description 


ProActivity solves a difficult business problem 


CUSTOMER 





by supporting the discovery, design, analysis and 
optimization of complex business processes 

e-Business solutions often cross organizational 
boundaries. The problem is that no one person 
understands all the details of the end-to-end 
process. ProActivity supports discovery and veri- 
fication of all parts of the process and ensures that 
the end-to-end process is complete and consistent 

Built on a set of patented algorithms, 
ProActivity guides the discovery of complex 
business processes and automatically builds 
process models that can be viewed from various 
dimensions with the click of a mouse. While 
business process management and workflow 
tools are becoming very important for e-business 
solutions, those tools support graphical depiction 
and automation of the process. They do not nec- 
essarily reduce the time or skill sets necessary to 
discover and analyze the process 

ProActivity does, and it can be used to create 
business process models that can be exported to 
XML through its application interface for use in 
other process automation tools 

ProActivity supports the process life cycle 
and helps ensure a complete design. In the dis- 
covery stage, ProActivity guides the process of 
efficiently extracting information from those 
who have knowledge of different parts of the 
business process, stores the pieces of the process 
and ensures the design is complete and consis- 
tent. The process modeis generated include busi- 
ness process views as well as system-level 
views. These help business people understand 
and verify the business process. The models can 
be used in the deployment stage to define the 


system and integration requirements. ProActivity 


assess the impact of change will provide substantial competitive advantage and return on investment 


the insider's guide to e-business integration 
www.ebizaQ net 


ProActivity Inc. 


at a glance 


Product name: ProActivity 
Type of product: Process Discovery 
and Management 


Address: 181 Wells Avenue 
Newton, MA 02459 


Phone: (617) 332-0095 
Fax: (617) 332-0295 
Web site: www.proactivityinc.com 


Founded: 1998 
Ownership: Private, venture-backed 
with $10 million 


Total employees: 50 

Total in service/support: 16 
Total in R&D: 20 

Number of customers: 10 


also supports impact analysis of dynamic views, 


enabling companies to optimize configurations 
before the system is implemented. It also sup- 
ports impact analysis of process changes. The 
repository in ProActivity includes information 
on data processing activities, business objects, 
data flows, roles and resources. ProActivity cre- 
ates process blueprints as well as business-level 
reports, including how many activities a person 
performs in a given process. Additional process- 
es and systems can be easily added and ana- 
lyzed. This enables ongoing process innovation 
and reduces the risk of creating incomplete or 


inconsistent e-business specifications. 


FEEDBACK 


The customers we spoke with all felt that ProActivity provided information on business processes they could not obtain in other ways. One customer compared 
designing a system without ProActivity to driving in the fog with a dirty windshield: You just don’t have the same visibility, and you're likely to miss something. 
Another Fortune 500 customer plans to systematically document all the company’s processes in ProActivity and provide the same level of management for enter- 


prise processes as is currently provided for data management. This customer is convinced that the ability to view complex processes from multiple viewpoints and 
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Your TECHNOLOGY anpb BUSINESS FUNCTIONS RELY 
ON EACH OTHER FOR SURVIVAL. But SOMETIMES IT FEELS 


LIKE THEY’RE OPERATING IN PARALLEL UNIVERSES. 


Bring them together with ProActivity — the only platform for designing and 
managing business processes. With a unique lifecycle approach, ProActivity 
uncovers the data flow throughout your organization, revealing its interactions 
with systems, applications, and employees. The ProActivity platform gives you 
the knowledge and environment you need to integrate and deploy your PROACTIVITY:, 
e-business and IT solutions. Most importantly, you'll get your business and 


technology people back on speaking terms. www.proactivityinc.com 
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PATRICIA KEEFE 


Russia Gets IT 


| e q e ») 
OMETIMES THE BEST THING to do when you are so far be- Ominous Signs: 


hind you can’t possibly catch up is to leap forward. In a big, 
splashy way. 
I recently spent a week in Russia talking to IT managers 

and business strategists about the challenges they face as 

their country gingerly plots its path through the open market. You 


can guess at some of their obstacles, 
but you might be surprised at how 
well positioned they are to move 
ahead. It may take the Russians a 
while longer — OK, maybe a lot 
longer — to grasp customer service, 
but they get the value of aligning IT 
with the business strategy. And they 
are doing so with highly skilled IT 
labor, at a fraction of the cost borne 
by Western competitors. This is crit- 
ical in a country struggling to catch 
up with the West on multiple fronts. 


‘ 

PATRICIA KEEFE is 
Computerworld’s 
editorial director. Contact 
her at patricia keefe@ 
computerworid.com. 


sm, Internet, is still tiny. (Which ex- 
plains in part why the B2B revolu- 
tion will precede B2C in Russia.) It’s 
only within the past 10 years that 
Russian banks literally retired their 
abacuses and automated routine 
transactions, and it’s true they’re 
still wiring the country — though 
with fiber optics and satellite com- 
munications. 

This state of virginal automation 
combined with a highly trained IT 
workforce is actually Russia’s ace in 
the hole. 





The IT managers I talked to at 
some of Russia’s leading commercial 
entities made it clear that they aren’t sitting in 
some back room waiting for orders and the 
rubles with which to carry them out. They’re 
making the decisions and getting the funding 
somehow. 

Nor are they starting with the basics. There’s 
no point. 

The knee-jerk tendency is to dismiss the for- 
mer Soviet states as a technological backwater 
— and to some degree, that’s true. The percent- 
age of people who own their own computers or 
who regularly visit, never mind transact on, the 





It’s a free pass to leapfrog over the 
legacy infrastructures that Western companies 
and governments constantly trip over, and it’s 
what will enable the Russians to at least catch 
up technologically sooner than we'd expect. 
They may even forge ahead in some areas 
where they’re free to install the latest technolo- 
gy. They have an opportunity to think big, and 
they know it. It may take the country a while to 
amass the commercial know-how and mind-set 
needed to become a global, economic power- 
house, but you can be sure the IT side of the 
house will have done its job. D 
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PIMM FOX 
Is Cisco 
“Transmitting 


HEN CISCO SYSTEMS, a bell- 
wether for all that’s technology 
and Internet, announced this 
| month that it missed its Wall Street esti- 
| mates, CEO John Chambers cited a 
slowing economy and — in particular — deterio- 
| rating sales to telecommunications carriers. In a 
| conference call with analysts, he also said falling 
| sales to dot-coms (about half of last year’s level) 
| and budget cuts at some of its large customers in 
manufacturing were reasons Cisco missed earn- 
| ings estimates by a penny per share. 
All this may be so, but Cisco’s real problem is 
that it competes in many different networking 
| markets, diluting its effec- 
| tiveness in its core router 
| technology. 

In the 1990s, almost all 
of Cisco’s revenue came 
from selling routers, and it 
had a stranglehold on the 
market. But in 1997, the 
company made more mon- 
ey from sales of nonrouter é 

PIMM FOX is 
Computerworld’s West 

Coast bureau chief. 
Contact him at pimm_fox® 

pen oreo Se 


the voice over IP market in 
1998 with the purchases of 
Precept Software, Summa 
Four and Selsius. Cisco powered into fiber-optic 
equipment, buying Skystone Systems and 
Pipelinks, and in 1999, it paid $7 billion for Cer- 





ant. It bought WheelGroup and Global Internet 


| Software for the encryption and security market. 


In the meantime, competitors lined up to take 


| pieces of Cisco’s once-core business: selling 
| routers to Internet service providers and tele- 
| . . : 

communications carriers. 


Throughout the 1990s, Cisco’s Internet Operat- 
ing System (IOS) was the lingua franca for mov- 
ing large amounts of data through the pipes of 
companies such as Qwest and UUnet. It still is. 
Rather than its boxes, using IOS to tie a branch to 


| the data center may be Cisco’s greatest contribu- 


tion to IT operation. 

But those 13 million lines of IOS code were ag- 
ing, and companies like Juniper Networks and 
Foundry began nipping at Cisco’s heels, winning 
big customers such as MCI, UUnet and Qwest 
with focused Internet products. 

We've seen large established networking com- 
panies succumb to market shifts. StrataCom was 
acquired by Cisco in 1996. Bay Networks was ac- 
quired by Nortel in 1998. Wellfleet, Ascend and 
Cascade were once mighty giants. 3Com was once 
competition for Cisco, as was Cabletron. Today, 
they’re footnotes. 





But Cisco could be supplanted as well. Its near- 
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monopoly on the router market — around 85% — 
seemed invincible. No longer. It’s facing a tech- 


nology challenge from Juniper’s JUNOS operating | 
| unauthorized access to systems or information. 
And less than 30% encrypt any e-mail. 


system and in Gigabit Ethernet from Foundry. 
Another issue is Cisco’s stock, which has fallen 
more than 60% from its high last March. Cisco 
uses stock to do deals (as part of its R&D efforts). 
This past May, Cisco’s chief strategy officer, 
Mike Volpi, said Cisco might make more than 30 
acquisitions this year. Perhaps, but a lower stock 
price means deals will be more expensive. 
Finally, a report in PR Week said Cisco had been 
sounding out Washington-based public relations 


firms to handle crisis work. The question is, Is this | 
| nificant security breach. 

| m Sometime in the next five years, you or a com- 
pany in your industry will have a near-catastroph- | 
| ic security breach. 
| @ Between now and then, you will spend only 


for the crisis that has passed, or one yet to come? D 
JOHN GANTZ 


‘Take a Bite Out of 
Crime on the Web 


AST YEAR WAS A watershed for 

the Internet. The number of users 

worldwide passed the 300 million 
mark. Whew! But that also means that 
the number of crooks on the Web sur- 
passed 1 million. 

The calculation is based on the U.S. Uniform 
Crime Reporting Statistics, which we have ex- 
trapolated to the world at large, so we’re only 
talking about crooks whose vitae include arrest 
and conviction. Their crimes include forgery, em- 
bezzlement, fraud, vandalism and disposing of 
stolen goods. To reach that number of crooks, we 
assume that the ratio of criminals to law-abiding 
citizens is the same in the online world as in the 
off-line world. At this rate, there will be twice as 
many crooks on the Web in four years. 

Appropriately, spending on hardware, software 
and services to make Web 
sites secure will also more 
than double, from $14 bil- 
lion last year to $30 billion 
in 2004, according to IDC 
forecasters. 

So everything should be 
all right, right? 

Nope. Metcalfe’s Law 
says a network’s value 
grows by the square of the 
cost of adding users. So 
does the potential impact 
of an action with malicious 
intent. Crooks in the off-line world at most can 
mug only a small group of victims at a time; on the 
Net, it’s as easy as spam pie. With Internet com- 
merce expected to grow from $300 billion last year 
to almost 10 times that in 2004, I don’t think we’re 
spending anywhere near enough on security. 

In an IDC survey last fall, 95% of IT managers at 
large and medium-size U.S. companies acknowl- 
edged that they had experienced some kind of “in- 
cident” in the past year, but mostly, that meant 
dealing with viruses like the Love Bug. Some 55% 
thought they had had an attempt at unauthorized 


JOHN GANTZ is a senior 
vice president at IDC in 
Framingham, Mass. Con- 
tact him at jgantz@idc.com. 
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use of their systems, applications or e-mail, but 


| only 10% said such an event was detected after it 


occurred. Only 45% thought they had experienced 


Given the highly publicized Web site problems 


| at Yahoo, Microsoft, AOL and the World Econom- 
| ic Forum, I’m surprised that was the only may- 


hem detected in the survey. I allude to those 


| crime statistics. How many crimes are committed 


for which there are no arrests and convictions? 
How many aren’t reported or detected? 

Make the following assumptions: 
mw Sometime in the next year, you will have a sig- 


about a tenth of what you should on security. 


| ° 
| ™ No matter how many times you have requested 


more money for security and been turned down, 
the IT department will be held responsible if and 
when there’s a major security breach. 

Two pieces of advice: First, make sure you have 
some crackerjack security technicians in your 
shop to stop problems before they occur. And 


| make sure they’re well paid, well motivated and 
| won’t cause trouble themselves. Half of all securi- 
| ty breaches occur from inside the company. 


Second, force your company to develop a mis- 


|} sion statement on security, document company 


security policies and spell out security deploy- 
ment plans for every major business initiative. 


| These should be signed off on by all top execu- 


tives. That way, when the big breach occurs and 





Burden of Proof 


ALSO AM a member 
of the bar and of 


some of the same 


| committees that Emily 
| Frye serves on, but I 
| have a very different 


outlook on e-mail [“De- 
stroy E-Mail, and Find 


| Trouble,” News Opinion, 
| Feb. 5). 


Try to prove that an 


| e-mail was intentionally 


sent by a particular user. 
You can’t. The time/con- 
tent data in the e-mail is 
essentially unproven, 
and the content of the 
e-mail may be digitally 
signed, but the other 
components of the 
process leave the validity 
open to question. 

The real issue is the 
need for a uniform 
evidentiary model. 
Without it, and its ac- 
ceptance by the courts 
of the world, the e-mail 
problem will remain. 
Todd S. Glassey 
Chief technical officer 
Boarderless Technologies Inc. 
Menlo Park, Calif. 


RYING TO pre- 

serve every e-mail 

carries its own 
punishment: It costs a lot 
of money and is an un- 
due burden on the busi- 
ness. When I consider 
which e-mails to pre- 
serve, I look only at the 
requirements for paper 
documents. If I wouldn’t 
have to keep the printed 








message, the electronic 


| version is deleted imme- 


diately. If it really has to 


| be kept, I tend to keep a 


printed version. That 
way, all the necessary 
documents can be pre- 


| sented in the same, con- 
| sistent format. 


Julius Szelagiewicz 
Vice president of IS 


| Turtle & Hughes Inc. 
| Linden, N.J. 








| A Kernel of Truth 


UNDERSTAND you 
needed both sides of 


the story in reporting 


| on the National Security 
| Administration’s Linux 


release [“Feds Unveil 


‘Security-Enhanced’ Lin- 
| ux Prototype, 


Comput- 
erworld.com, Jan. 10], but 


| you really could do bet- 
| ter than “an analyst at 


Aberdeen Group.” Ker- 


nel developers are much 


more representative of 
the Linux community, 


| and Kernel Traffic sum- 


maries are just a click 


| away, at http://kt.linux 
| care.com/kernel-traffic/ 
| kt20010108_101.epl#2. 

| Grzegorz Staniak 


Systems administrator 
Zagiel SA 

Lublin, Poland 
gstaniak@zagiel.p! 





Not Black and White 


NSTEAD OF looking at 
[ cecentatiation asa 

problem to be solved 
by centralization, or vice 





you're under fire, you'll be able to drag others 
with you into the foxhole. D 


versa, perhaps one 
should look at both ap- 
proaches together [“A 
New Old Debate” Busi- 
ness Opinion, Jan. 29]. 
Define the strengths and 
weaknesses of each, then 
manage the situation to 
apply the best mix. As 


| the company changes, 


the mix that’s best will 
change also. Results are 
what count, and results 
should ultimately govern 


| the appropriate mix. 
| This is not a black and 
| white issue; why contin- 


ue to treat it that way? 
Eric Goldfarb 

ClO/CTO 

Macmillan USA 
Indianapolis 


eric.goldfarb@macmillanusa.com | 





The Plodding Beast 


BELIEVE Don Tap- 
[= is largely wrong 

(“Bush Can Use IT to 
Aid Democracy,” News 
Opinion, Jan. 22]. Yes, 
democracy is a plodding 
beast, but it must be to 
balance the huge spec- 
trum of interests, con- 
stituencies and require- 
ments that exist in any 
country, especially one 
as large as ours. Instant 
polling doesn’t make for 
a good decision. And 
providing ongoing guid- 
ance based on continu- 
ous computerized feed- 
back is a recipe for disas- 
ter. What real-time guid- 
ance would the elected 
officials who wanted to 


| keep the Union together 

| have received during the 
course of the Civil War? 
Surely, it served the 
country’s interest to 
have elected the best 
people and then let them 

| get on with running the 

| country without worry- 
ing about collective wis- 
dom and insight from 
the populace. 
Sarwar A. Kashmeri 

| CEO and publisher 

| ebizChronicle.com 

| New York 
sarwar.kashmeri@ 
ebizchronicle.com 


MAGINE being gov- 
[= not by those 
whom you elected, 

but by those who have an 

| ax to grind on a particu- 
lar issue or who have 
nothing better to do than 

| futz with the issues of 
the day. And imagine the 
additional power the var- 
ious news media would 
gain with their ability to 

| shape public opinion on 
an issue. 

| Jeff Smith 

| Ringwood, Ill. 


| COMPUTERWORLD welcomes 
comments from its readers. 

| Letters will be edited for brevity 

| and clarity. They should be ad- 

| dressed to Jamie Eckle, letters 

| editor, Computerworld, PO Box 

| 9171, 500 Old Connecticut Path, 

| Framingham, Mass. 01701. 
Fax: (508) 879-4843. Internet 
letters@computerworld.com. 
Include an address and phone 

| number for immediate verification. 





A fatal exception @E has occurred at 8628:C@811E36 in UXD UMM(E 


Windows 95 


66618E36. The current application will be terminated. 


Press any key to terminate the current application. 
Press CIRL+ALT+DEL again to restart your computer. You will 
lose any unsaved information in all applications. 


Press any key to continue ~_ 
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GOODBYE BLUE SCREEN, HELLO RELIABLE MICROSOFT' 


In the 24/7 digital economy, your users don’t have time to be staring at “blue screens.” NSTL test results 
show that Windows 2000 Professional is 13 times more reliable than Windows 98* Which means users 
will need far less support. But that’s just the beginning of the news on Windows 2000 Professional. 
You'll also find enhanced deployment capabilities (including remote installation and unattended installs) 
which give you full control of large-scale system installations to save you time and resources. And your 
control of users’ desktops is broader than ever, from flexible access to total lock-down. Also, business 
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WINDOWS’ 2000 PROFESSIONAL. 


data is available to users either locally or remotely and is secure with built-in features such as Encrypted 
File System and support for IPSec and L2TP. And, when on the road, users can take advantage of offline 
files and folders with the help of Synchronization Manager. All of which adds up to the complete OS for 
the digital economy. Microsoft Windows 2000 Professional. All business. All the time. For more reasons 

to upgrade existing machines or to specify Windows 2000 Professional on new machines, visit 


a 


microsoft.com/windows2000/ pro. Software for the Agile 





DON TAPSCOTT 


Don’t Doubt the 
Future of the 
New Economy 


HE IMMINENT first-year anniver- 

sary of the Nasdaq’s implosion is 

precipitating goofy theories as to 
what went wrong. Some claim that there isn’t a 
New Economy. E-business and the Internet are 
a bust, and it’s time to go back to tried-and-true 
principles that have guided commerce and invest- 
ing for decades, if not cen- 
turies, they say. 

But heeding such advice 
would be a stunning mis- 
take. There is a New Econ- 
omy, with the Internet at 
its heart. Spurn this no- 
tion, and your company’s 
failure is assured. 

Whether or not we’re in 
a New Economy isn’t some 
academic discussion. An 
economy is how goods 
and services are created, 
distributed and consumed. 
com} Throughout the 20th cen- 
tury, most of this activity 
was based on the corporation — vertically inte- 
grated as devised by Henry Ford. It was based on 
an infrastructure that included the electric power 
grid, roads, railroad tracks and the telephone. 

Now there's a new infrastructure added to 
them — the Internet — that’s lowering the costs 
of transactions and collaboration among people, 
firms, organizations and other entities. 

A new platform of wealth-creation is develop- 
ing, supplanting the individual corporation as the 
starting point for strategic thinking. I call it the 
business web. It’s a system of meshed entities — 
suppliers, distributors, service and infrastructure 
providers and customers — that use the Internet 
as the basis for business communications and 
transactions. 

Industry by industry, business webs are eclips- 
ing the old model of the corporation. Smart com- 
panies are using the Web to achieve goals they 
have striven toward for the past 25 years: focusing 
on core competencies, reducing transaction costs, 


DON TAPSCOTT is chairman 
of Digital 4Sight Corp. 
(www. digital4sight.com) 
and co-author of Digital 
Capital (Harvard 
Business School Press, 

2000). Contact him at 
dtapscott@digital4sight. 





innovating more effectively and gaining new ways 
to deepen customer relationships. This is giving 
rise to new business models that are more effec- 
tive than those of Industrial Age corporations. 
This is why the march toward the New Economy 
continues even though the Nasdaq has crumbled. 
Despite what some pundits claim, Nasdaq and 
the New Economy aren’t interchangeable terms. 
In fact, many Nasdaq companies are Old Economy, 
and many companies on the (old Industrial Age) 
New York Stock Exchange are New Economy. A 
company chooses the economy it wishes to be a 
part of. It doesn’t depend on what product it sells 








NEWS 


| or on what exchange it’s listed. It depends on the 
| business model it embraces to create customer 
| value and shareholder wealth. 


Examples abound. Take FedEx Corp. It’s listed 


| on the NYSE. It delivers parcels from points A to 


B, a service that predates Marco Polo. Neverthe- 
less, FedEx is a New Economy company, having 
redesigned its business processes based on the 
Web. More than 80% of its shipments are ordered, 
tracked and managed via the Internet. The com- 


| pany is using the Internet to deeply integrate its 
| logistics expertise into the business processes of 
| other firms. Companies such as Enron, Schwab, 


Herman Miller, Cisco, Nortel, Gartner and Dell 
are using business web architecture to outpace 


| their competition. 


The lesson of the Nasdaq’s tumble is that the 


| Net isn’t about dot-coms. But this shouldn’t be 

| misconstrued to mean that we aren’t beginning a 
| profound transformation in the way societies 

| create wealth. We’ve only just begun. D 


WILLIAM M. 


Collaboration 
Counts in 
C-Commerce 


URING THE past two years, col- 
laborative commerce, or “c-com- 
merce,” has become a major focus 


ULRICH 


| for many organizations. C-commerce optimizes 
supply and distribution channels to make an 
| organization more competitive and more prof- 


itable. Deploying c-commerce systems and relat- 
ed infrastructures helps companies collaborate 
up and down the supply 

chain. Collaboration for 

the common good must 


| be the prime motivating 


factor in getting demon- 
strable value from a 
e-commerce initiative. 

For example, Exostar is 
an electronic marketplace 
formed by the aerospace 
industry to optimize the 
time it takes to move parts 
and products. Member 
companies, which include 
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Raytheon, Lockheed Mar- 
tin and Boeing, also generate improved customer 
satisfaction because they can use Exostar to trace 
product availability through the supply chain. A 
company acting alone could never accomplish 
this feat. 

C-commerce is the next evolutionary step 
beyond the simple process of selling goods or 
services to customers over the Internet. It has 
emerged as a priority because the Internet has 
made high-speed, widespread buying and selling 
possible — and necessary. 

For example, if companies within your industry 
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establish an electronic marketplace to attract 


buyers and you don’t participate, your market 


share could shrink. Similar risks arise when 


| companies refuse to collaborate in distribution, 
| software development or standards initiatives. 


With c-commerce becoming a necessity, execu- 
tives should emphasize ways in which people and 
institutions can cooperate to reach common 


| goals. A multipronged strategy should consider 


the following: 


| m Positioning technology as an enabling capabil- 


ity and not the solution. 
w= Emphasizing collaboration in every aspect of 


| your e-commerce efforts. 
| m Formalizing governance structures that build 


collaborative behavior into the bylaws of jointly 


| created c-commerce organizations. 


There is significant hype about the claims of 
software and integration vendors on c-commerce 
support. Vendor products facilitate everything 
from online meeting capabilities to interenter- 


| prise workflow management. These tools are im- 
| portant enabling factors in a c-commerce plan, but 


initiating and deploying a c-commerce effort de- 
pends more on the collaborative skills of people. 
Companies need to cooperate to build common 
solutions to shared challenges. This may involve 
shifting to a more collaborative mind-set when 
working with business partners, suppliers, dis- 


| tributors, customers and competitors. In doing 


so, executives and employees must cast aside an 
“us vs. them” mentality and focus on how they 


can work with other companies to better serve a 


common set of requirements. 

As relationships form, their collaborative na- 
ture should be built into the governance struc- 
tures used to formalize those relationships. Ex- 


| ostar is an independently incorporated enterprise 


formed to govern c-commerce activities among 
its members. Its stated mission is “to create an 
improved way of doing business through an In- 
ternet-enabled, secure marketplace that increases 
the efficiency of transactions and enhances col- 
laboration across the supply chain and product 
life cycle.” The creation of a legal entity to govern 
c-commerce efforts allowed members to build 
collaboration into Exostar’s bylaws. 

Numerous industries have launched other ef- 
forts to deploy shared software, sourcing services 
and e-commerce standards. For example, several 
companies, including IBM, formed Universal 
Description, Discovery and Integration (UDDI) 
to create a directory of services and to help accel- 
erate the acceptance of B2B e-commerce. UDDI 
hasn’t formed a legal entity to institutionalize 
collaborative behavior, and with no governing 
structure in place, relationships among members 
could become less cohesive and destabilize. 

For c-commerce to truly succeed on a grand 


| scale, companies may need to rethink how they 


view their business partners, customers and com- 
petitors. Past reluctance to collaborate with com- 
petitors could stymie c-commerce efforts. In this 
new landscape, everyone is your partner. Formal- 
izing these relationships takes time and commit- 
ment, but they will benefit entire industries be- 
yond what any one company could accomplish. D 
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HUNG JURY 


Canadian supermarket 
giant Sobeys last month 
scrapped its $89.1 mil- 
lion SAP implementa- 
tion. Some say Sobeys’ 
move is indicative of a 
larger problem: ERP | 
systems are too complex | 
for high-transaction- 
volume retail business- 
es. But others say it just 
takes patience and skill 
to make the systems 


work. » 36 


MEASURING UP 


Since the e-commerce 
world is just hitting its 
awkward preteen years, 
there isn’t much histori- | 
cal data available to cre- | 
ate solid benchmarks. | 
But some consultants | 
are starting to help | 
companies see if their | 
| 
| 
| 





dot-com ventures mea- 
sure up. » 42 





MONIKER 
MADNESS 


You’ve heard of Silicon 
Valley, but what about 
Biotech Beach or the Sil- | 
icon Sandbar or — get 
this — Automation Al- 
ley? Cities, regions and 
states around the coun- 
try have taken on high- 
tech sobriquets to help 
them vie for top IT tal- 
ent. But how many of 
these digital destina- 
tions live up to their 
names? » 44 


TAXING aS 


For many independent 
consultants, sitting 
down with a copy of 
Form 1040 Schedule C 
is a horrifying thought. 
But tax time doesn’t 
have to be overly pain- 
ful, say those who have 
learned that lesson the 
hard way. » 46 
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ING'B2B TRANSACTIONS online 
ea fevolutionary approach, says 
gan’ s Peter Miller: “If there were 

Pale Wh processes in the paper world, 
then’ you need an electronic equivalent.” 


FINDING WAYS 
TO FIGHT FRAUD 


YOU THINK YOU'VE COVERED ALL THE BASES in crafting a B2B e-commerce 


strategy — until you realize that you haven’t taken any 
steps to protect yourself against fraud from your business 
partners. IT managers like Peter Miller (above) of J.P. 


Morgan Chase subsidiary LabMorgan are discovering tech- 
nologies that can help companies guard their fortresses. 
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ERP giant gets mixed 
reviews on its retail line 


BY LUCAS MEARIAN 
AND MARC L. SONGINI 
SAP AG's applications for retailers con 
tinue to be stung by a series of high- 
profile installation problems that many 
say illustrate the complexity of trying 
to fit an integrated suite of enterprise 
resource planning software into a retail 
operation. 

The latest example came late last 
month, when Canadian supermarket 


chain Sobeys Inc. abandoned an $89.1 


million SAP Retail implementation. 

“[SAP Retail has] insufficient core 
functionality ... to effectively deal with 
the extremely high number of transac- 
tions in our retail operating environ- 
ment,” said Bill McEwan, president and 
CEO of the Stellarton, 





BUSINES 
Retailers Hit Installation Bumps With SAP Software 


said the German vendor has signed up 
264 retailers as customers, 128 of which 
have gone live. 


But Greg Girard, an analyst at AMR | 
Research Inc. in Boston, said most of | 
the retailers are running SAP’s financial | 
| and human resources applications, not 


SAP Retail itself. 


“I can’t point to a single happy SAP 
Retail account in North America,” said | 


Girard. 


SAP Retail is a good product, argued | 


Kevin Restivo, a Canada-based analyst 


who works for IDC in Framingham, | 
| Mass. But technology is never a “silver 


bullet, [just] part of a larger puzzle” 
that includes making sure internal 


business processes are in tune with the | 


software’s capabilities, Restivo said. 
That’s especially true given the pro- 


cessing complexities faced by retailers, | 


he added. 
In late 1998, Reebok 
Ltd. was the 


International 
first U.S. 





Nova Scotia-based retail 
chain. 


SAP Retail, which now 


Sobeys isn’t alone. 

Jo-Ann Stores Inc. in 
Hudson, Ohio, and pet 
supply retailer Petsmart 
Inc. in Phoenix last fall 
both attributed low fi- 
nancial results to prob- 
lems with their SAP Re- 
tail rollouts. Both, how- 
ever, said they’re pleased 
with the system overall. 

SAP officials contin- 
ued to defend the capa- 
bilities of SAP Retail. 
Geraldine McBride, gen- 
eral manager of the con- 
sumer sector business 
unit at SAP America Inc., 


The Best Instructors and 


Best Buy? 


How retail enterprises 
have fared with SAP’s 
software: 


» Nash Finch Co., a Minneapo- 
lis-based food wholesaler and 
supermarket operator, shelved 
most of a $76 million SAP proj- 
ect two years ago after develop- 
ment delays made it impossible 
to install the software in time to 
fix its Y2k problems. 


>Home Depot successfully in- 
stalled SAP retail in Argentina 
last summer after painstakingly 
interviewing 30 SAP users 
to learn from their mistakes. 


run by 
Mass.-based 
maker. Peter Burrows, 
Reebok’s chief technol- 


ogy officer, said the SAP | 
system is producing “a | 
very high level of stock | 


accuracy” in the stores. 
But the yearlong in- 
stallation process wasn’t 
easy and required some 
adjustments as the proj- 


said. 

The Home Depot Inc. 
recently completed an 
SAP R/3 installation in 
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| lect personal information 
| but fail to tell consumers 
| how that data will be 

| used, how security is 


| Congress is catching on. 


| vacy bills have already 


| the company’s Argentina operations. 


Gary Cochran, vice president of in- 


| formation services at the Atlanta-based 
home improvement retailer, said he | 


made “limited use” of SAP’s consulting 
services. 


ERIC J. 


SINROD 
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| Instead, Cochran put together a team 
| of 50 top employees — IT personnel 
| and end users. Because of the team’s 
familiarity with legacy systems, he said, 
| it didn’t have to “face some of the con- 
| figuration issues that have been prob- 
| lematic for other people.” 
| “It went so smoothly, there was liter- 
| ally no ripple in corporate organiza- 


| tion,” Cochran said. D 


E-LEGAL 


Demanding Privacy 


HE TIME HAS COME for Congress to step up to 
the plate and enact legislation that provides base- 
line Internet privacy protection. 

Contrary to popular belief, the U.S. Constitution 
doesn’t generally guarantee personal privacy. 


Rather than fill in the gap, howev- 
er, Congress and the Clinton admin- 


: “-- | istration espoused “self-regulation” 
company to go live with | 


as a solution to privacy concerns. 


2 | Unfortunately, some privacy certifi- 
supports 115 outlet stores | s 


the Stoughton, | 
footwear | 


cation programs were criticized for 
failing to adequately enforce privacy 
compliance. Meanwhile, for several 
years in a row, FTC surveys have 
shown poor Internet privacy protec- 
tion by many Web sites. 

Because of such concerns, Con- 
gress has taken some legislative 
steps, including the Children’s 
Online Privacy Protection Act, 
which became operative last April. 


| It has also provided privacy protec- 
ect went along, Burrows | ~ : PEUNsEe Oe yP 
| tions for certain sectors through leg- 
| islation such as the Financial Ser- 

| vices Modernization Act. 


Lacking definitive federal law, 
some states have passed their own 
measures. But much of this legisla- 
tion is unenforced or incomplete. 

An analysis this year of 75] U.S. 
and international Web sites con- 
ducted by Consumers International 
— a London-based con- 


| sortium of consumer-pro- 
| tection organizations — 
found that “most sites col- 


maintained and what 


| rights consumers have 
over their own informa- 


tion.” 
The good news is that 


Various Internet pri- 


been introduced in the 


oo 
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| 107th Congress, and there will likely 
| be many more. 
Congress should pass legislation 

| that, at a minimum, forces Web sites 
to display privacy policies promi- 

| nently, lets consumers know how 

| companies collect data and lets 

| them access their own data and opt 
out of having their data collected 

| altogether. 

Some privacy advocates have sug- 
gested that legislation should go 
even further, barring cookies and 
Web bugs and requiring consumers 
to opt in before a Web site can col- 
lect personal information. 

But should federal privacy regula- 
| tions preempt state laws? With no 
| realistic geographic boundaries, it’s 

difficult for online businesses to 
| comply with potentially competing 
| laws of different jurisdictions. The 
| National Association of Attorneys 
General is urging Congress not to 
hamper state enforcement of priva- 
| cy violations. And the U.S. Cham- 
| bers of Commerce has vowed to 
fight further regulation. 

Issues like federal pre- 
emption shouldn’t slow 
down the privacy legisla- 
tive train. Every day, we 
learn about greater po- 
tential for Internet pri- 
vacy invasion. Just two 
weeks ago, it was re- 
vealed that Nortel’s Per- 
sonal Internet technol- 
ogy suite can enable ISPs 
to track the online move- 
ments of customers. 

Enough already. Let’s 
get some baseline privacy 
protections in place now. D 











Want to simplify your life? Contact DataCore Software. Our SANsymphony storage networking software virtualizes 


storage, creating a shared pool from networked storage assets. In other words, you simply click, drag and drop 


It's that easy. So log on today to www.datacore.com/relief and get your free SAN assessment. You'll feel much better. 


Yt DataCore 


SOFTWARE 


© 2000, DataCore Software Corporation 








~ BUSINESS 


E-GM President: No Slump 


General Motors Corp. an- 
nounced earlier this month 


that its January sales were | 


down 5% from January 2000. 


The news followed recent an- | 
| nouncements by Detroit-based | 
GM that it will seek to reduce | 
its head count by 10% and low- | 


er its inventory levels. 


But Mark Hogan, president of | 
| e-GM, said he is optimistic that 
an economic downturn won't | 


affect IT initiatives currently 
under way in his unit, which is 


charged with managing the | 


automaker’s consumer Web 
entities. 
Hogan recently spoke with 


Computerworld’s Lee Cope- | 


land Gladwin about the com- 


| pany’s current situation and its 
| cause our inventory was built a 
| little higher than we would 


plans for the future. 
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| Q: How will GM’s IT initiatives be 
| affected by the slump that the au- 


tomotive sector is facing? 

A: There is no slump. ... We 
went through a fourth-quarter 
production adjustment be- 


have liked. But the combina- 
| tion of federal interest rate 


cuts along with the prospec- 
tive tax cut has given us some 
early indicators that consumer 
confidence is coming back up. 


| Q: Are IT cost-cutting initiatives 


more or less im- 

portant in the 

face of a possible 

economic reces- 

sion? 

A: It’s not a re- 

cession; it’s a 

strong market. 

There is belt- , 
tightening go- HOGAN: “There 
ing on. Most isno slump.” 
companies, in 

very good times, tend to let up 
a little bit on due diligence 
over cost creep and structural 
costs. And General Motors is 
not any different. We’ve had 
more structural costs creep 
into the business than we 
would like, and that’s why we 
announced a 10% salary head- 
count reduction, which we will 
handle by attrition. 


Q: Will IT be affected by this head- 
count reduction? 

A: IT has not been affected. In 
fact, it’s fully funded ... be- 
cause we need them. 


Q: How important is Covisint (the 
online auto exchange formed a 
year ago by GM, Ford Motor Co. 
and DaimlerChrysler AG) to GM, 
and will funding for it continue 
even if the economy faces more 
downturns? 

A: The Covisint exchange is 
very important to us because it 
is the engine to drive what we 
call order-to-delivery. And 
that’s what we're trying to 


| move to — where the customer 


orders either online or in the 
dealership and has a highly 
predictive date of when they'll 
receive that vehicle. It'll be 
much quicker than our current 
model, which is 60 to 90 days. 


Q: Is GM's ultimate goal build-to- 
order, in which the vehicle gets 
built after a customer orders it? 

A: Build-to-order is coming. 
We have to enable our back- 
end systems ... line up our 
supply-chain pipeline and be 
more efficient. D 
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WORKSTYLES 


Lawrence Berkeley Lab Uses IT 


To Explore the Wonders of Science 


Interviewee: Brent Draney, 
network analyst 

Company: National Energy Re- 
search Scientific Computing 
Center (NERSC), a division of 
the Ernest Orlando Lawrence 
Berkeley National Laboratory 
Main location: Berkeley, Calif 


hh | 
v 





Number of employees (end 
users): 4,000 at Law- 
rence Berkeley; NERSC 
supports about 2,500 sci- 
entists and researchers 
worldwide who use the 
network to access the 
lab’s supercomputer. 
What’s the mission Ra 
of Lawrence = 
Berkeley? “We're a 
Department of Energy 
(DOE) facility supporting 
government and 
academic research 
in arange of fields, 
from chemistry to 
energy, the environment, biolo- 
gy, physics, etc. Because 
there's such a huge and diverse 
set of research happening 
throughout the DOE and the 
world, DOE created a super- 
computer center so that scien- 
tists would have the resources 
to do the computations they 
need to support their research.” 
How is supporting a re- 
search network different 
from supporting a corpo- 
rate network? “We're the 
largest unclassified computer 
center in the world. Where most 
companies measure things in 
gigabytes, we measure them in 
terabytes, and we're currently 
working toward a petabyte of 
online storage - that's 1,000 
terabytes. So I'm constantly 
dealing with our ability to have 
the best possible throughput. 
“Also, in a corporation, the 
most important goal is 24/7 up- 
time, because outages could 
mean lost revenue. Our funding 
model isn't based on profit; the 
most important thing is provid- 
ing the best resources possible 
So availability is important, but 
we can go down for short times 
to push the capabilities of the 
computers and the network.” 
What impact has the Cali- 
fornia energy crisis had on 
NERSC? “We work in the dark 
a lot because we are very ener- 
gy-focused. But fortunately, 


- 
Se 

> 7 istration in Wash- 
ington? “We're actually | 


What It's Like 
To Work at ... and bonuses: 


“They do their best to | 


we're not subject to the rolling 
blackouts because, by random 
luck, we're in an area with po- 
lice and fire stations, [which are 
exempt from the blackouts].” 
Are you a government em- 
ployee? “The lab is funded by 
the DOE, but the University of 
California currently has the con- 
tract to run the lab. So techni- 
cally, we're employees of the 
university system.” 
Do you have to worry 
about job security 
when there’s a 
change in admin- 


a line item in the con- 
gressional budget, so 
we feel somewhat se- 
cure, mainly because 
of the research we 
turn out.” 
Compensation 


adjust salaries to market level, 
but any government or academ- 
ic institution is going to lag be- 
hind. We don't have bonuses or 
stock options, but we get spot 
awards and outstanding perfor- 
mance awards.” 

Training: “We have a lot of 
training, and because we're 
dealing with advanced and spe- 
cialized equipment, training re- 
quirements are written into our 
reviews. Also, they'll pay up to a 
third of our salary toward pursu- 
ing an advanced degree.” 
Workday: Flexible. “We rotate 


being on call 24/7. Some weeks | 


it’s very quiet, and others are 
like last night - | got paged 
three times.” 
Kind of offices: A combina- 
tion of open space and private 
Offices. 
Any windows? “Yes, with 
some of the best views of the 
San Francisco skyline and bay 
in the world.” 
Little perks: Team-building 
outings, a holiday party and di- 
vision meetings “where scien- 
tists present to us the research 
that we've made possible, and 
it's amazing to see the fruits of 
your efforts.” 
Last companywide/depart- 
ment perk: “A team-building 
event sailing on San Francisco 
Bay on my sailboat.” 
- Leslie Goff 
(/goff@ix.netcom.com) 
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ED YOURDON 


Spelling Success 


LEARNED AN IMPORTANT LESSON in my IT career years 
ago, when I accompanied a veteran colleague to a project 
kick-off meeting. Someone else was in charge, but my col- 
league took advantage of a brief moment of silence at the be- 
ginning of the meeting. 
“T thought it would be useful,” my colleague said innocently, “if 


we could agree 


before we get into all of the technical details — 


as to how we would recognize whether the project has succeeded.” 


Several people in the room cleared their 
throats in preparation for long soliloquies on 
the True Meaning of Success. But before any- 
one could start, my colleague charged ahead 


with another observation. 


“Actually,” he said, with the same air of inno- 
cence, “I think it would be useful to begin by 
asking who is allowed to declare success.” 

Another moment of startled silence, and 


everyone turned expectantly to the 
manager who had convened the 
meeting and who was presumed to 
be in charge of everything. 

To his credit, this manager re- 
sponded by saying, “I'd like to say 
that I’m the one who declares suc- 
cess or failure, but the truth is that 
if Fitzgibbons [not his real name] 
in finance doesn’t like what we’re 
doing, he can pull the plug on this 
project anytime he wants.” 

This was apparently news to sev- 
eral people sitting around the 
table, for the shock was evident on 
their faces. 

“Well, what about Mr. Harrison?” 
my colleague asked, referring to 
the CEO with the respect and def- 
erence that indicated that Harrison 
(not his real name) was just as 
powerful as his title implied. 

“Oh, well, Harrison can kill the 
project too,” the first manager 
replied with a shrug. “But this proj- 
ect is a real hot potato, and half of 
the board isn’t sure it’s a good idea. 
Harrison doesn’t have the power to 
defend this project single-handed- 
ly, nor can he unilaterally declare it 
to be a success.” 


After a little more discussion, it became evi- 
dent that we had all signed up for a project 
whose success couldn’t be guaranteed by any 
one executive, but whose failure could be de- 
creed at a moment’s notice by a half-dozen 


stakeholders. 


And that led us back to my colleague’s first 
question: What would be the criteria used by 
these people to decree success or failure? 


It didn’t take long to arrive at another set of 
political realities: None of the power-wielding 
executives cared at all about maintainability, 
portability, reliability, flexibility, user-friendli- 


ness or any of the other aspects of “quality” that 


What are 
the criteria 
that will be 

used to 

declare 
success or 

failure? 


the IT professionals cared about so passionate- 
ly. None of them cared whether the technical 
work was worthy of the ISO 9000 and SEI 
CMM certifications that the IT department had 


worked so hard to achieve. 

The system’s functionality was 
important, but there was a consen- 
sus among the meeting’s attendees 
that the key stakeholders were 
pragmatists in this area: If we re- 
membered the Pareto Principle and 
delivered the key 20% of function- 
ality that provided 80% of the sys- 
tem’s benefits, we would be safe 

As for budget, our official-but- 
powerless manager explained, “If 
we go more than 20% above our 
budget, Fitzgibbons will pull the 
plug. Otherwise, it doesn’t matter.” 

And on the all-important issue of 
schedule, we learned another reali- 
ty: “No one believes we’re going to 
come anywhere close to the official 
schedule; they keep talking about it 
just to maintain the pressure on us. 
But if we don’t get this system fin- 
ished by the time we go out for our 
next round of [venture capital] 
funding, then we’re toast. Harrison 
will cancel the project, and he’ll 
personally fire every one of us.” 

To manage a successful project, 
there’s a lot of detailed, day-to-day 
work that must be done. 

But you would be amazed how 


many intelligent, experienced managers never 
ask these two fundamental questions at the be- 
ginning of their projects: Who has the right to 
declare success? And what are the criteria that 
will be used to determine success or failure? D 


Yourdon is the editor of Cutter IT Journal, published 
by Cutter Consortium in Arlington, Mass. Contact 
him at wwwyourdon.com. 
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New technologies capable of 
handling secure, real-time trans- 
actions will help prevent, detect 
and prosecute B2B e-commerce 
fraud. By Mathew Schwartz 


BUSTERS 


ICTURE THIS: You're the CEO 

of a high-tech electronics 

manufacturer and keep most 

suppliers on a short leash 

with one-year contracts. But 
in order to reduce headaches, increase 
automation and share the risk of price 
fluctuations for one trusted supplier, 
you've agreed to a standard “cost-plus” 
pricing model — you partner with the 
supplier, and it opens its books and 
charges you a fixed margin above an 
item's “at-cost” price. Now, your net- 
works talk with each another for pro- 
curement and billing, and inventory is 
automatically ordered and delivered. 
Your company saves time and money by 
not having to oversee everything. 

Right? 

Right on all counts but one. Yester- 
day, one of your engineers noticed that 
the price of a key component in a cir- 
cuit assembly was half what it used to 
be, but the price reduction hadn’t been 
passed on; the supplier has been over- 
charging you. Think it could never hap- 
pen? Well, it did recently to a West 
Coast electronics company, which de- 
manded — and received — the money 
it was due, with interest, from the sup- 
plier. Rather than issuing a verdict as to 
whether it was intentional fraud or a 
mistake, the electronics maker levied 
a stiff penalty against its supplier to 


make sure it would never happen again. 


Welcome to the intricacies of busi- 
ness-to-business e-commerce, where 
having a successful business isn’t 
about having the best technology or 


Preventing B2B E-Commerce Fraud 


1. Understand your corporate crown jewels 
(critical assets). 


2. Understand who wants what you have 
(threat agents). 


3. Keep abreast of common attacks and elec- 
tronic-fraud schemes that could be used against 
your network. 


4. Ensure strong authentication (i.e., PKI). 


portal design. Even when networks 
talk to each other, securely and in real 
time, such commerce is fundamentally 
about finances: Is the price right? Do 
customers really have the money they 
need to buy the goods they’ve ordered? 
Are sellers absolutely guaranteed to 
receive their money? 


How Bad Is It? 


The extent of business-to-business 
e-commerce fraud today isn’t fully 
known because many companies don’t 
report their losses. But with Stamford, 
Conn.-based Gartner Group Inc. fore- 
casting that the worldwide business- 
to-business exchange market will grow 
to $7.29 trillion by 2004, even minor in- 
cidents of fraud could be worth mil 
lions of dollars. 

The average organization loses about 
6% of its total annual revenue to fraud 
from customers and business partners, 
and from abuses committed by its own 
employees, according to the Associa- 
tion of Certified Fraud Examiners in 
Austin, Texas. The association pegs the 
total fraud and abuse price tag for U.S. 
organizations at $400 billion annually. 

Given the risk of fraud, it’s not sur- 
prising that many companies haven't 
even begun conducting business-to- 
business e-commerce. “Most of the 
companies I’m working with now are 
not seriously engaged in Internet-en- 
abled B2B e-commerce. They’re still 
evaluating the risks,” says Vish Krish- 
nan, a professor at the McCombs 
School of Business at the University of 
Texas at Austin who primarily deals 
with companies in the communica- 


5. Develop procedures for forensics (evidence 
collection) and incident response, such as an 
emergency response team or investigators. 


6. Train staff in incident response and 
forensics. 


7. Develop electronic-records retention policies 
for logs and maintain them for an adequate period 
of time. 


tions, electronics and automotive in- 
dustries. Those risks include being 
able to hold business partners to bank- 
approved spending limits and securely 
authenticate buyers. 

But securing business-to-business 
transactions online doesn’t take a revo- 
lutionary approach. “If there were 


| well-known processes in the paper 
| world, then you need an electronic 


equivalent, a parallel solution set,” says 
Peter Miller, managing director and 
head of technology commercialization 
at LabMorgan and, until last year, the 
CIO at its parent, J.P. Morgan Chase & 


| Co. in New York. LabMorgan commer- 


cializes existing and new electronic fi- 
nance assets of J.P. Morgan. 

To put it simply, business-to-busi- 
ness e-commerce requires that compa- 
nies be able to apply all of their busi- 
ness rules to a given transaction. For 
instance, they need secure messaging, 
user authentication and spending lim- 
its. And electronic data interchange 
(EDI) can’t do it alone. 


| The Limits of EDI 


For years, EDI has been a mainstay of 
the banking and automotive industries, 
as well as many others. But the limits of 
EDI — one message at a time, the need 
for virtual private networks, the large 
initial costs that prevent many smaller 
companies from using it — work against 


| real-time Internet-based fulfillment. 


“There are a series of value-added 
e-business services that need to be 


| made available on the Web that, in 


conjunction with each other, allow 
real-time buying and selling to take 


8. Maintain adequate transaction logs, network 
logs and Internet service provider logs. 


9. Use monitoring tools to identify transaction 
irregularities, network intrusions, and Internet, 
e-mail and vulnerability alerts. 


10. Perform penetration testing (attacking your 
own network to judge its security) with forensics 
testing tools. 
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place,” Miller explains. 

That’s why more companies are in- 
vestigating transaction delivery net- 
works (TDN) that use the Internet, 
guarantee that transactions are re- 
ceived and ensure that buyers can’t 
repudiate any of their orders. TDNs 
use public-key infrastructure (PKI) 
and the Lightweight Directory Access 
Protocol components to not only iden- 
tify buyer and seller but also to en- 
crypt the transaction. With TDNs, “the 
ability to commit fraud in those B2B 
transactions would be very significant- 
ly reduced,” Miller says. 

J.P. Morgan built such a em for 
internal use in 1995. Miller says it deliv- 
ered $800 billion per day in financial 
transactions across 10 J.P. Morgan busi- 

, and it delivered a billion mes- 
sages without ever losing one. The 
bank spun the network off as a product 
last year and created a company to of- 
fer it called TransactPlus Inc. in Emery- 
ville, Calif. Early customers include J.P. 
Morgan, Arcordia Solutions Ltd. in 
London (another J.P. Morgan spin-off) 
and S] Corp. in Atlanta. Miller oversaw 
the development of TransactPlus while 
he was CIO at J.P. Morgan. 

Because it’s a TDN, TransactPlu 
an outsourced network for guarante 
ing the secure delivery of transactional 
messages — something the plain-old 
Internet can’t do. So if a TDN were 
processing a funds transfer, it would 
make sure that money was taken out of 
one account and deposited into anoth- 
er, or else it would halt the transaction. 
That’s a crucial step for improvir 
business-to-business accountability 
while reducing the potential for fraud. 

Whereas EDI took decades to gain 
acceptance, Gartner Group predicts 
rapid TDN adoption, because initial 
costs are minimal and the need already 

sts for many companies. 

TDNs are good for delivering and 
confirming the receipt of messages, 
but then there’s the problem of con- 
firming that the faceless potential b 
er of $500 million worth of steel is 
really who he says he is. That’s where 
PKI comes in. PKI uses a set of public 
and private certificates to make sure 
encrypted messages arrive unaltered. 
A user “signs” a digital certificate with 
a secret p ord. Compared with the 
paper-based method of obtaining actu- 
al signatures, PKI is much more secure 
and also leaves a digital audit trail, thus 
greatly reducing the risk of fraud. 


11. Obtain forensic tools and utilities to sup- 
port investigations. 


12. \dentify your specific vulnerabilities to 
network-based attacks and transaction-based 
schemes. 


13. Practice spin control so you can articulate 
the scope and type of incident and prepare man- 
agement's response to any cybercrime or fraud. 


BUSINESS 


But digital certificates are only as 
good as the certificate authority that 
maintains them. Because of concerns 
about quality control and the potential 
difficulty of interfacing with multiple 
certificate authorities to complete any 
one transaction, the banking industry 
created its own. In April 1999, the 
world’s 13 largest banks, including 
Deutsche Bank AG and Citigroup Inc., 
formed Identrus LLC in New York. 

Identrus’ charter is to help banks 
become the de facto underwriters of 
e-commerce transactions so that bank 
identities can be validated in real time 
at three different levels, the highest be- 
ing a bank guarantee that any given 
transaction will take place. In addition, 
big banks are charged with signing up 
smaller ones. 

The goal of New York-based Iden- 
trus is to eliminate fraud. “What we’re 
trying to do on the front end is to offer 

l-time commitment on the signing 


| of the order,” says Arthur Brieske, 


manager of e-commerce product man- 
agement, Europe, at Deutsche Bank in 
Frankfurt. That way, a seller can know 
in real time that he has received an or- 
der that the buyer can’t repudiate. 


Managing Risks 


Though TDNs and PKI are technolo- 


| gies companies can use to prevent busi- 


ness-to-business fraud, bad things in- 
variably happen. For instance, “between 
business partners, there’s a lot of theft 
of intellectual property,” amounting to 
millions of dollars each year, says Jay 
Ehrenreich, a senior manager in global 
risk management solutions at New 
York-based PricewaterhouseCoopers. 
The good news about investigating 


| business-to-business e-commerce 
| crimes is that “with digital certificates 


and signatures, it’s easier for you to 
trace back and get that evidence, and if 
the evidence isn’t there, it’s easier for 
you to point your finger at who was 
negligent,” says Brieske. 

Still, companies need to be careful 
with any evidence they collect. “Very 
few companies actually follow correct 
guidelines in terms of handling elec- 
tronic evidence,” says Ehrenreich. For 
instance, he says, companies need 
meticulous chain-of-custody proce- 


| dures. Without them, legal defense 


teams will have little difficulty de- 
stroying the data’s credibility. 

“Change one bit, you must acquit,” 
says Ehrenreich. D 


14. Consider taking out a cyberfraud insurance 
Policy to limit losses. 


15. Get to know your customers, partners 
and outsourcers through screening and due 
diligence. 


SOURCE: JAY EHRENREICH 
PRICEWATERHOUSECOOPERS, NEW YORK 









PETER MILLER of J.P. Morgan Chase’s 
LabMorgan: Companies need an elec- 
tronic equivalent - “a parallel solution 
set” - of processes from the paper-based 
world to secure B2B transactions. 
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ELUSIVE 


HE ALL-TOO-VISIBLE FIZZLE of dozens 
of Internet companies in recent 
months has many executives demand- 
ing detailed status reports on just how 
their own e-commerce operations 
compare. 

But there’s not a lot of data out 
there to measure against. At least not 
the kind of deep, historical benchmark- 

ing metrics that seasoned IT and corporate man 

agers can gather to judge the performance of oth 
er functional areas, such as end-user training or 
software maintenance. 

“There’s a long history to compare and contrast 
yourself against in mainframe-oriented IT bench- 
marking, and even client/server,” says Michael 
Lee, a systems consultant at AIT Global Inc., an 
IT education and seminar group in Kings Park, 
NY. “That's not the case with strategic Internet 
projects.” 

Senior IT managers typically don’t share many 
stories about what has or hasn’t worked for them 
because e-commerce is viewed as a potentially 
huge source of sales and profits. No one wants to 
give away their big-money secrets. 

As a result, questions often go unanswered, 
such as, “How does our plan for tying a ware- 
house inventory system to an online order 
ing application stack up against the way oth- 
ers have done it?” or, “Do the three extra 
months my development staff takes to build 
new features for our shopping cart software 
give us any competitive advantage?” 

Rather, the metrics most often used to mea- 
sure the success of Internet projects are of a much 
smaller scale. For example, log files can be used to 
catalog who visits a site, when they visit and what 
they do there — data from which analysts can 
extrapolate whether a given link or set of pages is 
effective. The IT department can create survey 
boxes to solicit opinions from random Web visi 
tors. Software packages can test how quickly 
pages load and whether links are broken 


Short on Answers 

But these measures don’t yield much concrete 
material about how a company’s Internet efforts 
compare with those of its rivals and whether it 
spends IT money wisely. 

A few companies, such as Keynote Systems Inc. 
in San Mateo, Calif., and Hackett Benchmarking 
and Research in Hudson, Ohio, have begun to sell 
consulting services to address these questions. 

Hackett, for example, instructs user companies 
to collect specific data from business units and 
their IT groups about the performance of and 
costs associated with key applications. For in- 
stance, a recent Hackett study at TRW Inc., 
an automotive and aerospace products maker 
in Cleveland, required the company to collect data 
on such items as spending on hardware, software, 
networking and staff, as well as details on how 


Despite a dearth of historical 
data to benchmark against, 
consultants are now beginning 
to provide services to compare 
your e-commerce operations with 
those of other companies. 
By Kim S. Nash 


supplier contracts are managed. 

Hackett then helps the client run the informa- 
tion through proprietary benchmarking software 
and databases that contain similar data from 1,600 
other companies. The final report, available two 
to three months later, rates the customer's prac- 
tices against those of its peers. 

Though that sounds like a long time, the feed- 
back will likely still be useful, Lee says. That's be- 
cause it’s designed to address larger e-commerce 
operational issues, such as Web development 


processes, rather than small, fast-changing topics, 
such as whether a new button triggers visitor 
click-through. 

The process typically costs $25,000 to $50,000, 
says Rick Roth, managing director at Hackett, 
which benchmarks e-commerce projects as well 
as more traditional IT areas. 

The Limited Inc. recently hired Hackett to 
gauge the overall effectiveness of its IT practices. 
The key finding, says Rodney Fleming, an ad- 
vanced technology consultant at the Columbus, 
Ohio-based clothing retailer, was that The Limit- 
ed could save money by buying more packaged 
software and doing less custom in-house pro- 
gramming. 


External Comparisons 

As for Internet ventures in particular, it’s easier 
to determine the effectiveness of some practices 
than others, Fleming says. 

For example, trying to determine whether end 
users are making productive use of The Limited’s 
intranet is tricky because it’s not clear to manage- 
ment whether employees use it because they find 
it useful or simply because they’re forced to, he 

says. But for Fleming, there’s just one mea- 
sure of an external e-commerce site that 
matters: “Are we profitable? That sums it 
up,” he says. He declines to say, however, 
whether www.limited.com or the Web sites 
of The Limited’s business units — such as 
www.victoriassecret.com — make money. 
Another Hackett customer, Agilent Tech- 
nologies Inc., an industrial and health care tech- 
nology company in Palo Alto, Calif., plans to stan- 
dardize all of its Web hardware and software as a 
result of its benchmarking study. 

“This is a much more cost-efficient method of 
rolling out [online] initiatives, and it also increas- 
es the speed of our successes by allowing the 
same experienced team to be involved in all of our 
Web projects,” explains Harry Smith, controller of 
CIO programs at Agilent in Colorado Springs. He 
declines to say how much time or money the com- 
pany would save that way. 


Needed: More Details 


Still, for e-commerce, benchmarking techniques 
must change before companies will get an accu- 
rate read on their online performance, says Patri- 
cia Seybold, CEO of Patricia Seybold Group Inc., a 
consulting firm in Boston. 

Companies with Internet savvy are looking ex- 

ternally, measuring what matters to customers, 

Seybold says. “Instead of simply worrying 

about click-through rate, [companies should] 

actually measure customer satisfaction on a 
very detailed basis,” she suggests. 

Important questions are whether the customer 
would do business with the company again and 
whether he would recommend the site to friends. 

Seybold also advises doing frequent — perhaps 
quarterly — satisfaction surveys and comparing 
their results with those of similar polls done by 
phone and in person. This data should also be 
compared to call center files that track customer 
complaints and problems, she says. That will 
highlight trends and process problems to fix im- 
mediately. 

E-commerce benchmarking must “get down to 
where the rubber meets the road,” Seybold says 
“We need to put ourselves into the customer’s 
shoes now.” D 
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SILICON 
SILLINESS 
REVISITEL 


Silicon this. Digital that. There 
are places all over the country 
that would have you believe 
that they are new hotbeds of 
high technology and job 
opportunity. We take a look at 
the reality behind their myths. 
By Gary H. Anthes 


E HAVE JET SERVICE HERE,” 

brags Chris Young, a se- 

nior project manager at 

the North Dakota De- 

partment of Economic 
Development and Finance. “We have 
hot water, we have heat, and we have 
electricity.” 

Young isn’t joking. He says many 
people have an otherworldly mind-set 
about North Dakota. He recalls a re- 
cent visit to New York when someone 
asked him how he had made his way 
there: “I said, ‘Didn’t you see my horse 
outside?’ ” 

Young’s job is to attract high-tech 


| employers, not all of whom can name 


ie capital of North Dakota (Bismarck) 
Seworeven know exactly where it 
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is (between Minnesota and Montana, 
and just as cold). 

In addition to heat and electricity, 
Young says, the state boasts a low cost 
of living and workers who are extraor- 
dinarily well educated yet are often 
employed in jobs well below their abil- 
ities. “Underemployment — in huge 
capital letters — is our problem,” 
Young says. But the state’s problem is a 
golden opportunity for high-tech em- 
ployers, he insists. 

It will be some time before any 
North Dakota city joins the ranks of 
techno-enclaves such as San Jose, Seat- 
tle, Boston or Washington. But the 
state is unmistakably an up-and-comer 
in high technology. Recently, the Santa 
Monica, Calif.-based Milken Institute 


Silicon Somethings 
ARIZONA 

Phoenix - Silicon Desert 
CALIFORNIA 


4 Orange County - Biotech Beach 


~ Paim Springs to Thermal - Cyberchella Valley 


Coast south from Ventura - Digital Coast 
anta Monica/Marina Del Ray - Media Del Ray 
as south of Market Street, San Francisco 
Multimedia Guich 
a Barbara - Silicon Beach 
ern part of state - Silicon Freeway 
Jose - Silicon Gulch 
eda - Silicon Island 


~ Scotts Valley - Silicon 
~ Petaluma/Santa Rosa/Napa Valley - Silicon Vineyard 


San Diego ~ Telecom Beach 
COLORADO 
Colorado Springs - Silicon Mountain 


CONNECTICUT 
Merritt and Wilbur Cross parkways - Silicon Parkway 
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published a list of the top 50 U.S. cities 
in terms of growth in high-tech output 
during the 1990s. Grand Forks, N.D., and 
Bismarck ranked 37th and 43rd out of 
the 315 cities considered, respectively. 

Trying to improve their chances of 
landing on one of these lists, many 
metropolitan areas have aped Silicon 
Valley by adopting names such as Sili- 
con Prairie, Silicon Gulch or Silicon 
Bayou (see story at right). 

About two years ago, in an article 
titled “Silicon Silliness” (March 22, 
1999), Computerworld investigated 
some of these locales to find out which 
of them truly deserved their titles. 
Deciding it was time to take another 
look, we’re presenting an updated list 
of Silicon Somethings (see below). 

It’s not clear how much this moniker 

mania has helped attract high-tech 

companies. But a number of small 
and midsize cities have, almost 
unnoticed, begun to morph into 
digital domains. 
The Milken Institute’s list of 50 
top “tech poles” — which com- 
bines several measures to arrive at 
a city’s overall “technology gravita- 
tional pull” — includes perennial fa- 
vorites such as San Jose (No. 1), Boston 
(4) and San Francisco (22). But also 
making the top 50 are Albuquerque, 
N.M. (7); Boise, Idaho (24); Cedar 
Rapids, Iowa (35); Minneapolis-St. Paul 
(32); and Colorado Springs (42). 

These upstart tech poles say three 
things give them an edge: well-educat- 
ed, highly motivated workers; modest 
living costs and tax rates; and lifestyle 
amenities to die for. 

“Having to sit through a stoplight 
twice here would be considered a mas- 
sive traffic jam,” says Bob Lokken, 
president and CEO of Knosys Inc., a 
software developer in Boise. “Our of- 
fices are about 100 yards from the riv- 
er. Guys go fly fishing at lunchtime if 
they want to.” Lokken says one-third of 


FLORIDA 

Boca Raton ~ Silicon Bayou 

Entire state - Silicon Beach 
Indiantown - Silicon Swamp 

Perry - Silicon Swamp 

ILLINOIS 

Chicago - Silicon City, Silicon Prairie 
Urbana/Champaign - Silicon Prairie 


1OWA 

lowa City/Fairtield vicinity - Silicon Prairie 
Fairfield - Silicorn Valley 

LOUISIANA 

Entire state ~ Silicon Bayou 


MAINE 
Portland - WebPort 


MASSACHUSETTS 
Boston - Cyber District 

Entire state - Dot Commonwealth 
Area around Hudson - Silicon Hill 
Hudson - Silicon Mountain 
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Knosys’ 100 employees came from out- 
side the state, many looking for access 
to fishing, backpacking and skiing. 
They came, too, for Boise’s laid-back, 
low-crime community. And few ever 
leave Boise, it seems, giving Knosys a 
turnover rate close to zero. 

That turnover rate, combined with 
low taxes and living costs, gives the 
Boise area’s 360 high-tech companies a 
huge advantage over their counterparts 
in Silicon Valley, Lokken says. Technol- 
ogy companies with a major presence 
in Boise include Hewlett-Packard Co. 
and Micron Technology Inc. 

In a recent study of the country’s top 
60 “cybercities” that was conducted by 
the AEA (formerly the American Elec- 
tronics Association), the Washington- 
based trade group ranked Boise second 
after Fort Worth, Texas, among small 
cities for growth in high-tech employ- 
ment from 1993 to 1998 and found that 
Boise had the shortest average com- 
mute time (16.3 minutes). 


Poised for Growth 


Colorado Springs ranked first among 
all cities in high-tech employment 
growth, second after San Jose in per- 
centage of homes with computers and 
Internet access and second after Boise 
in average commute (18 minutes). A 
number of relatively remote small and 
midsize cities ranked high in the AEA’s 
various measures of technoprowess. 

Semiconductor makers have been in 
Colorado Springs since the late 1970s. 
But the area got its biggest boost to 
high-tech status in 1992 when MCI 
Corp. moved hundreds of software de- 
velopers there from northern Virginia. 

Now, at a population of 515,000, the 
area has reached the critical mass that 
attracts ever more high-tech workers, 
says Rick Scott, president of the 
Greater Colorado Springs Economic 
Development Corp. He says technolo- 
gy workers can move to Colorado 


Boston suburbs (Route 128 loop) - Silicon Necklace 
Cape Cod - Silicon Sandbar 

North Adams - Silicon Village 

MICHIGAN 

Oakland County - Automation Alley 


MINNESOTA 

Area around Minneapolis/St. Paul - Silicon Prairie, 
Silicon Snowbank, Silicon Tundra 

MISSOURI 

Kansas City - Silicon Prairie 

Band thru Kansas City/Columbia/St. Louis 
- Silicon River 

MONTANA 

Region around Kalispell - Silicon Glacier 


NEBRASKA 

Lincoln - Silicon Plains, Silicon Prairie 
NEW HAMPSHIRE 
Portsmouth - e-Coast 

NEW JERSEY 

Garden State Parkway - Silicon Parkway 


Springs knowing that their spouses can 
probably find employment there and 
that if they lose their jobs, they can 
easily find new ones. 

Places like Colorado Springs and 
Boise can now profit by comparison 
with areas that are saturated with tech- 
nology companies and people, says 
Ross DeVol, director of regional and 
demographic studies at the Milken In- 
stitute. 

“In Silicon Valley, Atlanta and Fair- 
fax County, Va., what was a 20-minute 
drive to work is now an hour and 20 
minutes or longer,” DeVol says. “And 
the median house price in Silicon Val- 
ley for a three-bedroom house is 
$550,000.” 

Nevertheless, getting IT executives 
to move to small, out-of-the way places 
isn’t easy, no matter what the quality- 
of-life benefits, says Michael Nieset, a 
principal and managing director at 
Christian & Timbers, an executive re- 
cruiter in Cleveland. It’s far easier, he 
says, to get midlevel managers and 
programmers and analysts to take jobs 
in those places. 

In fact, Nieset says, companies es- 
tablished in large cities might well 
open branch offices in more remote lo- 
cales to take advantage of the low 
costs, much as some companies today 
outsource software development to In- 
dia. The most senior employees might 
be moved to those places for, say, two- 
year tours of duty while more junior 
employees would stay permanently. 

Some high-tech workers will always 
want to be in one of the country’s tech- 
nology epicenters, “but many other 
young workers are deciding there are 
other places that offer a better 
lifestyle,” DeVol says. “They have been 
voting with their feet.” In the next five 
years, the biggest growth in high-tech 
employment will be in cities like San 
Diego, Colorado Springs, Salt Lake City, 
Boise, and Austin, Texas, he says. D 


NEW MEXICO 
Albuquerque/Santa Fe/Los Alamos - Silicon Mesa 


NEW YORK 
Lower East Side, Manhattan - Silicon Alley 
Long sland - Silicon Island 


NORTH CAROLINA 

Raleigh/Durham - Silicon Triangle 

Catawba County - Telecom Valley 

OHIO 

Over-the-Rhine area, Cincinnati - Digital Rhine 


OKLAHOMA 
Payne County - Silicon Prairie 
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What’s in a Name? 


Are Silicon Prairie, Silicon Glacier and Silic 
Bayou among the hottest of the coun- 
try’s high-tech hot spots? 
They are not real,” says Michael Nieset, a 
cipal at Christian and 
t Silicon Valle 


it.” Nieset sniffs 
Keith Dawson, ec 
online newsletter 
nology Front’ 
omething of as aity of cé 
‘siliconia.” He says there are more 
such places now, most of them ir 
(See “Silicon Somethings,” bel 
There are 10 places going b 
con Prairie, five Silicon Beaches, three Sili 
Mountains and two each of Sil 
Forest, Gulch, Parkway, Swamp 
lage and Vineyard. There’s a Silicon Ho 
Tennessee and a Silicon Holler in Virginia 
Just west of Philadelphia lies Philicon Valley 
and Fairfield, lowa, is Silicorn Valley 
“| think a lot of places are 
selves a disservice by beinc ) 
cats,” says Ross DeVol, director of re 
and demographic studies at the Mil 
tute. “It raises credibility issues. You're better 
off saying you are not Silicon Valley y 
have some of the basic ingredients to act 


make something happen there.” 


Joing them- 


Dawson says that in order to become a 
high-tech mecca, a city or region needs excel 
lent schools, a political consensus for technol 
ogy promotion at state and local levels, good 
access to venture capital and “some sort of lo 
cal booster club or trade association.” 

And not being Silicon Valley is now a plus 
Dawson says. “It’s impossible to drive in, un- 
desirable to live in, impossible to buy a 
in. It's basically choking,” he says 

Perhaps the only high-tech growth area in 
the U.S. not to have crowned itself with a 


ninth-highest percentage of techno 

ers among all U.S. cities. “The area 

really marketed itself,” says Bob Lokken 
president and CEO of Knosys in Boise. “It's a 
well-kept secret.” - Gary H. Anthes 


SOUTH DAKOTA 
Sioux Falls vicinity - Silicon Prairie 
TENNESSEE 
Oak Ridge - Silicon Hollow 
TEXAS 
Austin - Silicon Gulch 
Hills west of downtown Austin - Silicon Hills 
Richardson - Silicon Prairie, Telecom Corridor 
Ed Bluestein Bivd., Austin - Silicon Prairie Texas 
VIRGINIA 
Fairfax County - e~Country 
Entire state - Silicon Dominion, 

Silicon Plantation 


Northern Virginia, suburbs of Washington 

- Silicon Holler 
Richmond - Silicon Seaboard 
WASHINGTON 
Seattle - Silicon Forest, Silicon Rain Forest 
Whidbey Isiand - Silicon Island 
Wenatchee Valley - Silicon Orchard 
SOURCE. “TASTY BITS FROM THE TECHNOLOGY FRONT~ 





SELF-DESCRIBED CYNIC, 
former IT consultant 
Kramer says he 
has no love lost for 
the Internal Revenue 
Service. And although he was aware 
that independent consulting 
volved certain tax reporting obliga- 
tions, he blissfully ignored filing his 
annual tax return or keeping records 
of his expenses for three years. 
Kramer (not his real name) is a New 
York-based IT professional who asked 
anonymous. “Taxes just 


Leo 


in- 


to remain 





seemed too horrible to think about, so | 
I just pretended they didn’t exist,” he | 
recalls. “I guess I thought maybe the | 


IRS would ignore me because I’m just 


a small fish in an ocean of corporate | 


enterprises.” 


. o . | 
But the IRS has its ways of catching | 
up with people, and, in 1994, Kramer | 


got 
$20,000 for back taxes and penalties. 

“I was really scared, and I felt that I 
had to take some sort of action to get 


a letter demanding in excess of 


back into the good graces of the powers | 


that be,” Kramer recalls. 

He met with an accountant, but with- 
out any records or receipts to back up 
his expenses, he had to pay the IRS the 
full amount due — including about 
$3,000 in interest and penalties. 

Although Kramer’s case is a lesson in 
the extreme, it underscores that tax 
time can be a burdensome, overwhelm- 


ing period for independent IT consul- | 


Tax Trials and 


tants. While IT professionals are ad- 
vised to think with a business mind-set, 
as a group, they aren't particularly in- 
terested in business tasks. They would 
rather roll up their sleeves and dive into 
a technical conundrum than into Form 
1040 Schedule C deductions. 

Evidence of the anxiety that tax mat- 
ters raise among IT consultants can be 
found in a forum on “Insurance, Taxes 
and Legal Questions” at RealRates.- 
com’s IT consulting community site. 
It’s one of the site’s most frequented 
discussion groups, generating over 
2,200 postings since July 1999 — with 
the lion’s share related to tax issues. 

In the end, tax-related paperwork 


was one reason Kramer opted out of 


consulting. But tax time doesn’t have to 
be overly painful. 


Get Professional Help 

The simplest route to easing your 
anxiety may be to hire a qualified tax 
professional. 

Jeremy Bell, a principal at Crane 





Tribulations 


Face it - paperwork isn’t a high priority for 
_ most independent consultants. That can 


_ result in some sticky situations during tax 


season. Here’s some advice learned the 
hard way to help keep tax time from being 
a taxing time. By Leslie Goff 


Consulting in Alameda, Calif., says he | 


retained an accountant as soon as he | 


and his wife, Janet Crane, founded their 
shop in 1994. 
“I had heard all kinds of urban leg- 


ends about the IRS. I didn’t know if they | 
were true, but I didn’t want to find out,” | 
Bell says. “If it came to an audit, the ac- | 
countant would be prepared to repre- | 


sent me.” 


But keep in mind that, like a computer, 
an accountant is only as good as the data 
| you feed him. Tenacious record-keeping 
throughout the year will eliminate many 
headaches come tax time, says Juda 
Kallus, a New York-based enrolled 
agent, who represents taxpayers before 
all administrative levels of the IRS. 

“Record-keeping is more important 


| 
| 
| 
| 
| 
| 
| 
} 


to the IT professional than knowing the 
ins and outs of the tax law,” says Kallus. 
“Entering your income and expenses 
and categorizing them in a software 
program will give you all the informa- 
tion you need to file.” 

Thorough record-keeping is one 
thing; understanding your allowable 
deductions is another. You should get 





~ COMPUTERWORLD February 19, 2001 


| professional advice at some point. If 
| you decide to seek out an accountant, 
| practice due diligence. 


Bell chose a firm that specializes in 


| helping consulting businesses. “I don’t 
| want to pay their fees to educate them 
| on my particular environment,” he says. 


Moreover, accountants who special- 


| ize are more likely to stay up-to-date on 
| the parts of the tax code that have the 


most impact on IT consultants. 
Kallus notes that while the tax code is 
the rule, regardless of your occupation, 


the following issues are particularly 


relevant to IT contractors: 


| m A change in the tax code in 1999 eased 
| restrictions on the home office deduc- 


| tion. 


Before, many IT consultants 
couldn’t deduct their home 
because they work primarily at client 
sites. Under the new IRS regulation, 
home offices that are maintained as 
the sole location for conducting 
administrative tasks, billing, re- 
search and meetings are de- 
ductible, Kallus says. Space used in 
your home to store hardware or 
software inventory that you resell 

to clients is also deductible. 
@ Training and education aren't 
automatically deductible — courses 
or seminars must relate to your 
current job. If you’re a systems admin- 


offices 


| istrator who wants to pursue applica- 








tions development, the IRS won't likely 
allow a deduction for a Visual Basic 
class, Kallus notes. 
gw If you’ve earned both W-2 (employee) 
and 1099 (freelance) income in the same 
tax year, Kallus says, you must track 
your income and expenses accordingly. 
Business expenses for W-2 gigs must 
be reported on Form 1040 Schedule A 
(employee-related job expenses), and 
those for 1099 contracts must be report- 
ed on Form 1040 Schedule C (profit or 
loss from sole proprietorship). 
w If you earn income outside of your 
home state, you may be required to file 
tax returns in each state you worked. 
“It’s a land mine of complications,” 
Kallus says. Since independent IT con- 
sultants often subcontract work to other 
independents, be aware that if you pay 
more than $600 to a 1099 contractor, 
you must file a 1099 form with the feder- 
al government; some states also require 
you to file 1099 forms, Kallus says. 
Kallus notes that these are but a frac- 
tion of the deductions and caveats that 
apply to IT consultants. For a complete 
analysis of your tax liability, consult 
with a tax professional, check the IRS 
Web site (www..irs.gov) or refer to a reli- 
able tax manual such as J.K. Lasser’s 
Taxes Made Easy for Your Home-Based 
Business: The Ultimate Tax Handbook 
for Self-Employed Professionals, Consul- 
tants, and Freelancers, fourth edition, by 
Gary W. Carter (2001, John Wiley & 
Sons, New York). 





Goff is a freelance writer in New York. 
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BY MARC L. SONGINI 
O IMPROVE 


their supply chains, 


some companies | 
have turned to | 


quick response processes. 


Quick response is a method | 
that allows manufacturers or 


retailers to communicate in- 


ventory needs for their shelves | 


or assembly lines in near-real 


time. These companies have | 


traditionally communicated 
with business partners about 


inventory replenishment via | 
interchange | 
(EDI) systems, faxes or phone | 


electronic data 


calls. But with the advent of the 


Internet, a growing number of | 
organizations have been turn- | 


ing to Web-based systems. 
High-profile companies that 


are either are in the process of 
implementing or have installed | 


such systems to boost the effi- 


ciency of their supply chains | 


include Switzerland’s Nestlé 
SA, San Francisco-based Levi 
Strauss & Co. 
based Canadian Tire Corp. 
Advocates claim that quick 


response systems can help re- | 
tailers and manufacturers trim | 
the fat out of supply chains, | 


speed up the time it takes to re- 


place depleted inventory, help | 
avoid stock-outs and boost the | 


number of inventory turns 


(when a retailer or manufac- | 
turer turns over its entire in- | 


ventory). 


Companies that offer quick | 


response technologies include 


SAP AG, Logility Inc. in At- | 


lanta, GlobeRanger Corp. in 
Richardson, Texas, and i2 Tech- 
nologies Inc. in Dallas. 


Get Real 


Quick response takes a vari- 


ety of forms. “Real time is a dif- | 


ferent thing to different peo- 
ple,” says George Brody, presi- 


dent and CEO of GlobeRanger. | 
“So quick response means dif- | 
ferent things to different peo- | 


ple.” For instance, he says, for 


some folks, asking for data in | 


real time might mean once an 
hour, for others, it might mean 
or once a day. 

The process requires a com- 
pany to share what could be 
seen as proprietary data about 


effi- | 
ciency throughout | 


and Toronto- 
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CONCEPTS IN BRIEF 


Quick Response 


DEFINITION 


Quick response is a process that uses real-time or 
near-real-time signals to trigger replenishment 
responses in the supply chain for manufacturers 
or retailers. This improves inventory turns, prod- 
uct allocation and replenishment times and helps 
retailers avoid running out of important stock. 


its sales and manufacturing op- 
erations with its partners. 
Some executives might be hes- 


itant about this for fear of ex- | 
posing sensitive information | 


about their companies’ prod- 
ucts or business strategies to 
their rivals, say observers. 
Nevertheless, when imple- 
mented correctly, quick re- 
sponse can be an integral com- 


ponent in helping organiza- | 


tions create lean and efficient 
supply chains. 

“Our supply-chain 
are based on real-time 
tomer information, quickness 
and speed,” says a spokesman 
for Dell Computer Corp. in 
Round Rock, Texas. 


On the Cutting Edge 


Dell is widely viewed as be- 
ing on the cutting edge of sup- 


ply-chain management. For in- | 


stance, if Dell.com receives an 
order from a customer for a 
DVD device, that request is 
passed along to Dell’s suppli- 
ers. If the suppliers can’t meet 
the demand for some reason, 
they will signal back to Dell, 
which will then notify the cus- 


stock or unavailable. 
Procter & Gamble Co. in 
Cincinnati recently detailed its 


efforts | 


cus- | 





own plans to establish a quick | 


response system through its 
entire supply chain. The sys- 


tem is expected to connect a | 
variety of participants, from | 


raw materials suppliers 
through the manufacturer to 
distributors out to retailers and 
on to consumers, says a Proc- 
ter & Gamble spokesman. 

The firm, which makes con- 
sumer products ranging from 
Pampers to Pepto-Bismol, says 





the system will help it manu- 
facture the right products as 
needed and get them to the ap- 
propriate warehouses and dis- 
tribution centers, thus reduc- 
ing bloat in its supply chain. 
This should result in happier 
customers, according to Proc- 
ter & Gamble. “A key benefit 
for consumers is that the prod- 
ucts are fresher,” says the com- 
pany’s spokesman. 
Hypothetically, this means 
that when a consumer buys a 
roll of paper towels, informa- 


collected by a bar-coding EDI- 
based device at the cash regis- 
ter. The aggregated informa- 
tion is sent each night to ven- 
dors who then replenish the 
depleted shelves, says Karen 
Peterson, an analyst at Gartner 
Group Inc., in Stamford, Conn. 


| Flow Manufacturing 


Other companies use quick 
response during so-called flow 
manufacturing. Whenever one 
unit of inventory is sold by a 
retailer, a signal is sent through 


Procter&Gambie 


PUT YOUR BEST FAC 


PROCTER & GAMBLE plans to create a quick response system through- 
out its supply chain as part of its effort to establish connections from 
raw materials suppliers through manufacturers to retailers and the con- 
| sumers who visit Web sites like this one. 

tomer that the item is out of | 


tion about that purchase goes 
all the way through the supply 
chain to the lumber company 
that cuts down the trees to 
make the product. 


Procter & Gamble plans to | 
install its quick response sys- | 


tems over the next few years; 
the company has pilots sched- 
uled throughout this year. 
Quick response systems 
have been around for about 
seven years. In the grocery in- 
dustry, where the use of these 
technologies has been fairly 
prevalent, point-of-sale data is 


the supply chain to replace it 
immediately, according to 
Kevin O’Marah, an analyst at 
AMR Research Inc. in Boston. 

That’s slightly different from 
collaborative planning, fore- 
casting and _ replenishment 
(CPFR) processes, which are 


closely related to traditional 


quick response methods but 
are Web-based and slightly 
more sophisticated. 

CPFR processes, say indus- 
try experts, let retailers and 
manufacturers examine statis- 
tics regarding the flow of prod- 





| and 


ucts to customers and attempt 
to forecast how much invento- 
ry is going to be required to 
meet future needs, according 
to O’Marah. 

In fact, some major compa- 
nies, including Canadian Tire, 
say that regular quick response 
is already past its prime. Cana- 
dian Tire is currently imple- 
menting software from Stock- 
holm-based Industri-Mate- 
matik International Corp. that 
should allow it to locate inven- 
tory anywhere in its supply 
chain at any time. 


The Next Big Thing 


“Quick response is kind of 
outmoded,” Art Karrer, 
project manager at Pharmavite 
Corp., a maker of vitamins and 
health-related products in Mis- 
sion Hills, Calif. The firm used 
EDI-based quick 
techniques between its supply 
centers and distribution cen- 
ters for one of its biggest part- 
ners, Troy, Mich.-based Kmart 
Corp., until seven years ago. 

Pharmavite has since shifted 
to CPFR to realize greater effi- 
ciencies in forecasting and re- 
plenishment and to gain in- 
sight into retail sales cycles. 
The company is now using ap- 
plications from Logility to es- 
tablish CPFR links with Kmart. 

Certainly, the Web is allow- 
ing companies to move closer 
to establishing real-time sys- 
tems. In fact, in some indus- 
tries it’s becoming a necessity 
to do so because the Web al- 
lows supply-chain processes to 
move with greater automation 
cuts out the need for 
phone and fax communica- 
tions, says O’Marah. The Web 
also creates a common format 
for sharing data among manu- 
facturers, suppliers, distribu- 
tors and carriers, he says. 

Moreover, Web-based quick 
response systems cost less 
than traditional EDI technolo- 
gies, which means even more 
trading partners than before 


says 


response 


| can connect via a quick re- 


sponse system, says Peterson. 
Nevertheless, some firms 
are unwilling to pay to replace 
legacy EDI systems, so those 
systems will likely remain in 
place for some time to come. D 
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Dear Career Adviser: 


I’ve spent 12 years working in the insurance industry and 
the past four years programming insurance applications 
in Micro Focus Cobol. My company was recently sold, 
and I want to get out of Cobol programming and into 


Web technologies and e-com- 
merce. I have Java training but 
no experience. I have two job 
offers. One job involves work- 
ing on the support team for 
Web application servers. This 
includes networking, TCP/IP, 
firewalls and security. I have 
good customer support skills, 
and the company is willing 
to train me. The second job 
involves doing system testing 
ona Web application. Java 
developers do the coding. 
Which is the better choice? 
PREMIUM POSITION 


Dear Premium: 

Testing is probably the 
weaker of these two choices, 
says Susan Cole, a recruiter at 
technology placement firm 
Donahue & Moore Associates 
Inc. in New York. While Web 
initiatives are hot at financial, 
brokerage and insurance com- 
panies, your second choice 
only involves testing Java 
applications using automated 
tools, and you wouldn't be 
getting any hands-on Java 
development experience. 

To make this choice worth- 
while, you would really need 


to be offered hands-on Java 
development training, says 
Cole. Furthermore, you 
should learn automated Web 
testing tools such as Mercury 
Interactive’s WinRunner and 
LoadRunner and Segue Soft- 
ware’s Silk to increase your 
value in the quality-assurance 
testing marketplace. 

Alternatively, knowing how 
to secure networks and han- 
dle the risks of doing busi- 
ness on the Web are key to 
the e-commerce initiatives at 
major banks, insurance com- 
panies and brokerage firms. 

Your career would blossom, 
Cole says, by learning firewall 
packages such as Check Point 
Software Technologies’ Fire- 
Wall-1, SonicWall Pro and 
Cisco Systems’ Secure Pix, 
including how to install them 
and how to secure a network. 
True expertise requires two 
years of increasingly respon- 
sible security roles, learning 
different packages and be- 
coming certified. 


Dear Career Adviser: 
I’m a vice president of net- 
work server operations at a 





Controversial Privacy 
Bill Back in House 


A bill that critics say could put the 
brakes on privacy legislation for the 
next two years was reintroduced in 
the U.S. House of Representatives 
last week. The Privacy Protection 
Commission Act, sponsored by 
Reps. Asa Hutchinson (R-Ark.) and 
Jim Moran (D-Va.), would create a 
17-member commission to study 
privacy issues. The bipartisan com- 
mission would have 18 months to 
deliver its legislative recommenda- 
tions to Congress. 

Opponents argue that the mea- 
sure would be used to table privacy 





legislation, but supporters say the 
bill doesn’t block Congress from 
acting on privacy issues without the 
commission's recommendations. 
The bill narrowly failed in the House 
last fall in a 250-146 vote - 14 
votes shy of the two-thirds approval 
needed to pass. 


Nordstrom.com Gets 
Data Warehouse 





| Seattle-based retailer Nordstrom 
| Inc.'s online shopping site, Nord- 


strom.com, has signed an agree- 
ment with Kirkland, Wash.-based 
online service provider digiMine Inc. 
for data warehousing and business 
intelligence services. Nordstrom.- 
com officials said the services will 
give it timely feedback about cus- 


| 





Fortune 100 company. I have 
an engineering degree, some 
graduate computer studies 
and more recent courses in 
technologies relating to e-busi- 
ness such as infrastructure 
design and security. I’m an 
avid e-business technology 
follower, but given the recent 
“dot-bombs,” I fear e-com- 
merce is in a downward trend. 
EMOVER 


Dear eMover: 

Many new e-commerce 
companies are doing just 
fine, and more mature com- 
panies are rapidly adopting 
e-business initiatives, notes 
John Roberts, CIO of diCarta 
Inc., a Redwood City, Calif.- 
based company that provides 
Web-based business-to-busi- 
ness contract management 
software that automates the 
contract process from negoti- 
ation through renewal. 

You might find interview- 
ing at young e-commerce 
companies exciting. But real- 
istically, because of your 
technical skills, compensa- 
tion and large-organization 
political savvy, your career is 


tomer interests, Web site perfor- 
mance, content and product con- 
sumption, browse-to-buy conver- 
sion and marketing campaign 
effectiveness. 





Buy.com Execs Out 


Online retailer Buy.com Inc. in Aliso 
Viejo, Calif., last week announced 
the resignations of Gregory Haw- 
kins, its chairman and CEO, and 
Mitch Hill, its chief financial officer. 
Board member James Roszak, the 
retired president of the life insur- 
ance division of Transamerica Corp. 
in San Francisco, will serve as 
interim CEO. Another board mem- 
ber, Donald Kendall, the retired CEO 
of PepsiCo Inc. in Purchase, N.Y., 
was appointed the new chairman of 
the board. Robert Price, who most 








more apt to grow at larger 
venues rather than smaller 
e-commerce vendors or Web 
implementations. 

Direct your search toward 
larger e-com- 
merce technology 
vendors of the 
magnitude of 
Commerce One 
or Ariba or com- 
panies like Ama- 
zon.com, whose 
network-critical 
e-business imple- 
mentations have 
huge needs for 
high uptimes and 
scalability. 

Or, with your 
organizational 
savvy, expand 
your choices by moving out 
of network operations into a 
CIO role or by moving into 
the realm of big consulting 
companies. 


Dear Career Adviser: 

I have a compensation ques- 
tion. I’m a CIO becoming a 
chief operating officer at a 
$40 million company whose 
revenue we hope will expand 
to $100 million over the next 
two years. The company’s 
product set is in the database 
product development and data 
mining arena. What are the 
standards for negotiating a se- 
nior compensation package? 

— Tor GUN 


Dear Top: 
Compensation at this level 
may involve some or all of 


FRAN QUITTEL is an expert 
in high-tech careers and 
recruitment. Send 
questions to her at 
career_adviser. 


COMPUTERWORLD February 19, 2001 


these components: base 
salary or cash compensation, 
sign-on bonuses, stock 
options, warrants convertible 
to stock, immediately vested 
stock, perfor- 
mance rewards, 
severance pack- 
ages and other 
perks. 

Not every com- 
pany provides all 
of these elements, 
and they can vary 
widely. Base cash 
compensation may 
vary from a low of 
$100,000 to more 
than $300,000 
annually. Some 
companies provide 
sign-on bonuses of 
$50,000 or more and immedi- 
ately vested stock; others 
don’t. 

Ownership percentages 
also vary. Your best gauge 
is to find out the compen- 
sation packages, stock 
included, of the company’s 
vice president-level hires. 

If vice presidents have 1% 

to 2% of the company, an 
incoming CEO might garner 
8% to 10% of the firm, which 
might ultimately become 3% 
to 4% of the company fully 
diluted. 

Finally, make sure to get a 
lawyer’s advice, urges San 
Francisco-based venture 
adviser Irv Weiman. Your 
employer may choose to 
reward you within or outside 
of its current incentive stock 
option plan, and there could 
be tax consequences for the 
company and for you. D 





| recently worked for PairGain Tech- 


nologies Inc., has been named CFO. 
The management shake-up 
follows a major restructuring 


| announcement made earlier this 


month, in which Buy.com said it 
planned to cut its workforce by 
10%, sharply decrease the number 
of products it sells and close or sell 
off all of its international Web sites. 





Lockheed Launches 
Global Integration 


Bethesda, Md.-based Lockheed 
Martin Corp. has chosen McLean, 
Va.-based XMLSolutions Corp.'s 
Business Integration Platform to 
integrate legacy systems within its 
global operations and to handle 
business communications with 





members of the Exostar Inc. 
exchange. Reston, Va.-based Exo- 
star is an electronic marketplace 
for the aerospace and defense 
industry. 


Security Firm 
Taps Executives 


Digital security services firm 
Guardent Inc. in Waltham, Mass., 
has named Edward Schwartz, a for- 
mer chief security officer at Nation- 
wide Insurance Cos. in Columbus, 
Ohio, as its new vice president of 
strategy. Guardent also named Ger- 
ard Brady, a former vice president 
of emerging technology at Internet 
Security Systems Inc. in Atlanta, as 
its new vice president of research 
and development. 
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over 80 terabytes | 


It's unthinkable. All your servers backed up in this small space, plus connectivity to everything 
you own. Choose the new Spectra 64000, and you're guaranteed the most terabytes in the fewest 
U’s on the planet. All of our rackmountable tape libraries are ideal places to store yesterday's 
victories while you're out corralling new ones. Get all the details, and our exclusive white paper, 
“Building Backup Infrastructure In An E.Commerce Environment” by calling toll-free 1-866-249-9966 


or visiting www.spectralogic.com/small-is-big. 


SPECTRA LOGIC 


THE GAME IS ALWAYS: SMALLER/FASTER/MORE 
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If what you have in mind is unlimited scalability with continuous access to data, then Brocade has 
your solution. It’s called a Storage Area Network (SAN). The enormous growth of business information along with 
the need for anytime, anywhere data access requires a new approach to data storage. A networked approach. A 
Brocade-based SAN enables your company to seamlessly add storage on demand to meet your ever growing data 


storage needs. Brocade SAN infrastructure solutions are available from leading system OEMs and integrators worldwide. 
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Find out how in our new white paper by visiting: www.brocade.com/avail 
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SECURE B2B ASPs | 


Application service 
providers are trying to 
find a way to tie cus- 
tomers into your back- 
end financial systems 
without compromising 
security. Bolt-on securi- 
ty is convenient, but 
ways to achieve it are far 
from standard. » 52 


E-SAFE DEPOSIT 


A Chicago bank is offer- 





ing users virtual safe de- | 


posit boxes in which 
they can store electronic 
documents and then 
share them securely 
over the Web with 
lawyers or business 
partners. The bank’s 


service provider is Free- | 


Drive, which claims 

ll million customers for 
the off-site, fault-toler- 
ant storage system. » 53 


AUTOHELP 


Start-up Attenza, for- 
merly Service91l.com, 





helped Visa automate its | 


online help desk, pro- 
viding the content Visa 
spent months and hun- 
dreds of thousands of 
dollars pursuing. Users 
like Visa and Egghead 
like the prepackaged 
help, but analysts say 
other vendors can offer 
similar services. » 62 


A MAGICAL 
WEB CAREER 


David Holland is fulfill- 
ing a lifelong interest in 
magic and comics, mak- 
ing the Web come alive 
at Dark Horse Comics. 
But as a Web application 
developer, he’s responsi- 
ble not only for outside 
customers but also for 
making sure internal 
staffers have the online 
tools they need. » 64 








IS THIS THE END 
OF PRIVACY? 


IN A WORLD OF always-on communication, sophisticated data 
mining and ubiquitous monitoring by advancing technologies, 


privacy as we know it seems to be in jeopardy. Increasing 
numbers of people choose convenience over protecting per- 
sonal information, but the key to preserving some no- 
tion of privacy is making sure the choice is 
there, say experts Computerworld spoke 
with for this week’s Future Watch. 
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ASPs ‘Tout Advanced 
E-Business Security 


Providers using increasingly sophisticated 
tools to authenticate users over the Web 


BY MARK HALL 
HEN 
Corp. 
cently sold 
40 boxcars 
of soda ash, 


FM¢ 
re- 


one customer used a browser 
to enter confidential order in- 
formation directly into the 
company’s SAP system — or so 
he thought. What the customer 
really used was a sophisticated 
secure proxy server from ser- 
vice provider Aventail Corp. 
“Aventail was a bridge be- 
hind our firewall that directed 
Web users to a proxy server. It 
looked just like they were in 
the back end. But that’s not the 
case,” said Craig Watson, CIO 
at Chicago-based FMC. 
Application service provid- 
ers (ASP) are now delivering 
increasingly sophisticated se- 
curity products that corpora- 
tions can adopt for their e-busi- 
ness initiatives without having 
to develop anything them- 
selves. And it’s happening just 
in time, as more IT organiza- 
tions like FMC outsource Inter- 
net infrastructure, Web 
vices and other operations. 
“Our business model depends 
heavily on per-use managed 
services,” Watson said. “We do 
everything by the drink.” 


Beyond the VPN 


When Suzanne Pawlisz, 
FMC’s IT program manager, 
was investigating managed 
services early last year, they 
weren't as sophisticated as 
those she now gets from Seat- 
tle-based Aventail. With Aven- 
tail’s service, Web users are au- 
thenticated and then given 
rights and privileges for appli- 
cation and data access. Previ- 
ously, only users of FMC’s vir- 
tual private network (VPN) 
were able to breach the fire- 
wall to get work done. 

Pawlisz said Aventail’s ex- 
tranet technology, Aventail.- 
Net, uses a “noninvasive agent” 
that leaves the client system’s 
IP stack data alone, unlike a 
VPN, which uses a client’s IP 
stack data. 


ser- 


The Aventail agent handles 
the initial setup between the 
server, which is housed at 
Beltsville, Md.-based Digex 
Inc.s data center and, say, a 
user’s remote PC. The Aven- 
tail.Net product authenticates 


| a user and then permits him to 


use only the applications he’s 
authorized to access. 

But it takes one more step. 
Unlike a VPN, which normally 
passes a user onto the server 
where the application 
all of the user’s appli- 


system 
resides, 
cations and services are pack- 
aged and sent to the remote 
Aventail server, so the external 
user never actually contacts 
FMC’s own server. Data mov- 
ing between the Aventail proxy 


| currently working on 


host and the real server is auto- 
matically checked for viruses 
and other security problems. 
According to Colleen Niven, 
an analyst at AMR Research 
Inc. in Boston, ASPs are cur- 
rently using advanced security 
that “reminds you of [military] 
stuff.” In fact, this 
month, Nupremis Inc. in Boul- 
der, Colo., introduced what it 


earlier 


| calls “military-grade network | 


security.” 

This advanced se- 
curity is being touted 
by ASPs as a differen- 
tiator, Niven said, but 
in the future, “high- 
level security will be 
considered the norm.” 

Pawlisz said 
not expecting her ASP 
to sit still. Aventail is 


she’s 


synchronizing its au- 
thentication process- 


ICAP Open Standard Could 
Ease Net Server Integration 


BY MATT HAMBLEN 
To reduce the risk of malicious 
ActiveX files being sent to em- 


| ployees’ desktops via the Inter- 


net, Germany’s second-largest 
bank recently began weeding 
them out using a new open 
protocol. 

Although only a skilled 
hacker would be able to enter a 
PC through ActiveX files, Hy- 
poVereinsbank didn’t want to 
open a door to attacks on the 
client PCs in its 1,400 offices 
that are used by many of the 
bank’s 46,000 workers, said 
Thomas Zaech, the Munich- 
based bank’s Internet access 
manager. 

To scrub out the question- 
able files, HypoVereinsbank in 
December deployed filtering 
software from Webwasher.com 
AG in Paderborn, Germany. 


| This software relies on the In- 
| ternet 
| Protocol (ICAP), a recently de- 
| veloped open standard for In- 
| ternet proxy servers to com- 
| municate with content servers. 


Content Adaptation 


With the open standard, 


| Vereinsbank 


Zaech said, it will be easier to 
integrate various software and 
hardware products than it 


| would be using proprietary ap- | 


plication programming inter- 
faces (API). 

Zaech said the Webwasher | 
technology will cost Hypo- 
about $470,000 | 
over several years, including 
support. 


| ‘Freedom of Choice’ 


The ICAP Forum in Sunny- 
vale, Calif., boasts a member- 
ship of more than 60 vendors, | 
including Oracle Corp., Novell 
Inc. and smaller firms that pro- | 
vide Internet services, caching | 


| servers, hardware and security. 


On Jan. 22, after more than a 
year in existence, the forum re- | 


| leased Version 1.3 of the ICAP 
| specification, which was re- | 


cently submitted to the Inter- | 


| net Engineering Task Force for 


review. 

Officials of the ICAP Forum 
claim that the open standard 
will make it possible for prod- 
ucts to communicate and 


WATSON: “Our busi- 
ness model depends 
heavily on per-use 
managed services.” 


TECHNOLOGY 


es with Microsoft Corp.’s Ac- 
tive Directory feature in Win- 
dows 2000, which FMC will be 
rolling out this year. 


George McNulty, director of 
technology at Wizmo Inc., an | 


Eden Prairie, Minn.-based ASP, 
already has data synchroniza- 
tion worked out for his cus- 
tomers. He uses Novell Inc.’s 
iChain security application 
with Novell Directory Services 
(NDS). NDS is ideal for han- 


dling ASPs’ directory manage- | 
ment synchronization hassles, | 


he said. 


Authenticated users are sent | 


to an available server in Wiz- 
mo’s data center along with 
their access privileges, said 

McNulty. As 


switch from applica- | 
application | 
during the course of | 
the day, they often | 


tion to 


change servers, and 
when they do so, all 
of the rights and 
privileges they were 
granted initially go 
with them. Data re- 
sides in a 
area network and is 


scale more easily, especially 
when compared with propri- 
etary APIs. 

“The ICAP approach gives 
us freedom of choice,” Zaech 
said. “With API-based solu- 
tions, such as Netscape’s proxy 
server, you’re locked on a spe- 
cific solution. I am able to 
combine the best-fitting cache 
with the best-fitting add-on.” 

Analysts said that with the 
ICAP approach, vendors could 


firms keep pornography, virus- 
es and other objectionable ma- 
terial from entering 

their corporate PC 
networks via the In- 

ternet. Through an 

open approach, a 

firm can use a range 

of devices, 
an API might work 
with only a_ small 
number of vendors’ 
hardware and _ soft- 
ware products, ana- 
lysts said. 

William Hurley, an 
analyst at The Yankee Group in 
Boston, said a major objective 
of the ICAP Forum is to ease 
the distribution of content 
around the Internet. This effort 
would help vendors and could 
also help end users, he added. 

“Ultimately, it can drive costs 


whereas 


users | 


storage- | 


ZAECH: Protocol 
wards off Net-based 
attacks by monitor- 
ing Web servers. 
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Extra Secure 


How FMC uses Aventail.Net 
extranet security: 

® The Web client connects to the hosted 
Aventail.Net server. 


® Aventail.Net authenticates the user 


® Application access rights and privileges 
are linked to th 


® The application and data are loaded onto 
the Aventail.Net proxy server at the ASP’s 
data center from various FMC servers 





doled out only according to 
need, McNulty said. NDS man- 
ages all of the synchronization, 
even if a user’s rights change in 
the middle of a session. 

ASPs have to work hard at 
establishing security, said Mc- 
Nulty, because most of their 
applications haven’t been de- 
signed from the ground up for 
Web use. 

But Niven said that’s begin- 
ning to change. She pointed to 
improved security in Ora- 
cle9i’s Virtual Private Data- 
base feature, which was specif- 
ically improved for ASP use. B 


down for enterprise users,” 
Hurley said. 

Two other standards groups 
were formed last year to work 


| toward efficiency in internet- 


working: The Content Alliance, 


| a creation of Cisco Systems 


Inc. in San Jose; and Content 
Bridge, whose members in- 


| clude Inktomi Corp. and Sun 
| Microsystems Inc. 


“As these protocols mature, 


| they will allow managers of 
sell products tailored to help | 


networks to make intelligent 


| decisions about what types of 


traffic to allow over a net- 
work,” Hurley said. 
John Pescatore, an 
analyst at Gartner 
Group Inc. in Stam- 
ford, Conn., said that 
he first learned of 
ICAP more than a 
year ago but that “it 
just hasn’t caught on 
in the U.S.” That will 
change as more in- 
ternetworking de- 
vices combine func- 
tionality, he added. 
For example, major vendors 
such as Intel Corp. are develop- 
ing a single device that sits on 
the edge of a Web server farm 
and provides caching, load-bal- 
ancing and Secure Sockets Lay- 
er acceleration for all the Web 
servers, Pescatore said. D 
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Bank Offers Virtual Safe-Deposit Boxes for Storing Data srs 


current format is to send it 

BY LUCAS MEARIAN On Feb. 16, FreeDrive re- | The service, named Compa- ; out replication of the original | along in an e-mail attachment 
In what’s being pitched as a | leased a service similar to its | nyDrive, lets businesses share | files. That creates between six and 
time-s é isaster recov- | online safe-deposit box for | blue ts, presentations and | “People are using e-mail as | 60 times replication of e-mail 
ery tool for consumers, a small | corporate customers. | other electre media with- | the _ late-20th ry pack | inside the firewall.” D 
Chicago bank has invested in a 
Web-based service that will al- 
low its customers to store elec- 
tronic documents and photos 
in online safe-deposit boxes. 

For $50 per year, any of New 
Century Bank’s 900 customers 
can have access to SOMB of 
password-protected online stor- 
age through FreeDrive Inc., a 
Chicago-based storage service 
provider. 

FreeDrive offers free online 
storage over the Internet, mak- 
ing its profit from online ad 
sales. It says it currently has 11 
million customers. 

“One of the things FreeDrive 
or any Web-based account al- 
lows you to do is share that 
data which you can’t from 
home unless you make an 
e-mail attachment,” said Mark 
Papadas, corporate accounts 
manager at FreeDrive. 

For customers, the value of 
an electronic storage service 
offered by a bank such as New 
Yentury is that it provides easy 
access to legal, banking or oth- 
er personal data. 


Secure Sharing 

Customers can also share 
that information with their 
banks, lawyers, business part- 
ners, family or friends by sim- 
ply giving them an access 
code, according to Marc Per- 
shan, New Century’s director 
of private banking. 

Users of the service can cre- 
ate files and then set sharing 
parameters for each document 
and designate them as either 
public or private. 

The bank also plans to even- 
tually offer its customers the 
use of digital cameras with the 
safe-deposit box service so 
that they will be able to docu- 
ment possessions for insur- 
ance purposes. 

According to FreeDrive 
President Dave Falter, the ser- 
vice also affords greater secu- 
rity than home electronic data 
storage. 

FreeDrive contracts with IT 
service giant Electronic Data 
Systems Corp. in Plano, Texas, 
to manage its storage. S 
uses storage arrays from EMC 
Corp. in Hopkinton, Mass. The 
arrays are configured for triple 
mirroring of data for fault tol- 
erance. 
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New Security M 
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anager 


Starting at Ground Zero 


Filling a newly created job, ‘Mathias Thurman’ 
faces both technology and management issues 


Editor's note: Last week, Security Manag- 
er’s Journal contributor Jude Thaddeus 
decided to pass the baton, but our new 
author, “Mathias Thurman,” is ready to 
take the next lap. New to management 
and with a fancy title, Thur- 

man faces the daunting task 

of creating a security infra- 

structure at a rapidly grow- 

ing start-up company. He’s 

got the job. He’s got the bud- 

get. Now he just needs a 
plan. 


for 
of 


LIKE 


start-ups. 


WORKING 
One 

my passions in life 

is helping to build 

things, and _ start- 
ups give me that pleasure. 
So now I’ve gone and done 
it. I've joined a small start- 
up company where I’m the 
first security professional 
on board. My previous ex- 
perience has been mostly 
hands-on engineering, project leader 
and analyst positions. This time, how- 
ever, I’ve been hired as the manager for 
enterprise security. 

My company writes its own software | 
and makes it available to clients over | 
the Internet via a standard Web brows- 
er. Our infrastructure is fairly small: | 
slightly fewer than 50 servers. Howev- | 
er, the application architecture is com- | 
plex and highly managed. Front-end | 
Apache Web servers talk to midlevel in- 
house-developed application servers, 
which talk to back-end Oracle database 
servers. It’s a three-tiered architecture 
with many interdependencies. 

The company administers its own 
network, servers and applications. And | 
we're building a state-of-the art opera- 
tions center that will monitor our pro- 
duction servers — which are currently | 
hosted at a service provider's site — 
complete with all the bells and whistles, | 
man traps and biometrics. We have | 
about 25 sales and professional service 
offices worldwide, all using virtual pri- | 
vate network connections to our cor- | 
porate intranet for such things as | 
e-mail, Web access and file sharing. We | 
also have several other areas: prepro- | 
duction, staging, quality assurance, de- | 


Manager's 
Journal 


velopment and probably others that I 
have yet to discover. 

I was hired after my employer hired a 
security consulting firm to accomplish 


one of those third-party, $30,000, three- 


week audits. If you’ve nev- 


er had the pleasure of hav- | 


ing some computer hack- 


ers dedicate three weeks of 


their lives to fully exploit- 


ing your entire livelihood, | 


then you don’t know what 
you're missing. It’s amaz- 


ing and well worth the 

money. We did fairly well. | 
However, there were some | 
glaring issues that need to | 


be addressed. 
One audit report recom- 


mendation was to hire a se- | 
curity manager and build a | 


team. So, here I am. I re- 


I've been told I have a sub- 


and I have a generous budget to hire | 
two security engineers. I’ve started by | 


creating a list of short-term projects. 


The Plan 


I'll review the audit and immediately 
address the critical findings. I'll also de- 
velop a project plan to address the addi- 
tional findings, get acquainted with the 
managers in all departments, become 
intimately familiar with the network 
and applications and develop a cross- 


functional team using people from dif- | 


ferent departments. 
In addition, I’ve started putting to- 


gether my shopping list: an intrusion- | 
detection system (IDS), file integrity- | 
checking software, two-factor authen- | 


tication infrastructure, vulnerability 


assessment tools, secure administrative | 


software and the hardware to support 
these applications. 


The company already has made a sig- 
Pix firewalls | 
from San Jose-based Cisco Systems | 


nificant investment in 


Inc., so I’m not going to switch. The 


network engineering department has | 


been administering the firewalls, and 
I'll leave that in place and just do audits 
of the rule base. 

I’m currently in the evaluation stages 


port directly to the CIO, | 


stantial hardware and soft- | 
ware budget to work with, | 





of picking an IDS. I’ve narrowed it 
down to SafeSuite from Atlanta-based 
Internet Security Systems Inc., the NFR 
Intrusion Dection System from Wash- 
ington-based NFR Security Inc. and 
a fairly new but well-respected tool 
called Dragon, from Rochester, N.H.- 
based Enterasys Networks Inc. I have 
to pick one that will incur the least 
amount of administration, can handle 
a large portion of our network traffic 
and is cheap. I’ll supplement this tool 


with some shareware and homegrown | 


assessment tools. 
For file integrity-checking software, 
nothing beats Tripwire software from 


Portland, Ore.-based Tripwire Inc. It | 


actually has a new, centralized manage- 
ment console that can talk to all other 


machines using Tripwire and allows | 


on-the-fly policy file changes, schedul- 
ing and reporting. Neat stuff. 


I'll use ACE/Server from RSA Secu- | 
rity Inc. in Bedford, Mass., and get a | 
bunch of SecurID tokens to handle my | 


authentication needs. 


Antivirus soft- | 


ware vendor F-Secure Corp. in Espoo, | 


Finland, has a fully supported version of 


the Secure Shell (SSH) secure session 
program, which is even reported to be 
able to utilize SecurID tokens through a 
RADIUS server (see glossary). The use 
of SecurID tokens and SSH has always 
been a problem in the past because the 
two couldn't work together. 


Getting Physical 

In addition to system and network 
security responsibilities, I’m also in 
charge of physical security. Fortunately, 
the funds will come out of a different 
pot of money, but I’m still responsible 
for identifying the requirements, which 
I feel should include picture identifi- 
cation access badges, card readers, 
closed-circuit TV equipment and a 
centralized alarm system. 

I’m also thinking of a biometric sys- 
tem for our network operations center 
(NOC), which is currently under con- 
struction. Not that I’m worried 
about unauthorized access. Biometric 
systems look cool when you walk a cus- 
tomer through the NOC. I believe it’s 
worth the money if we land one big 
contract because of it. Initially, and 
until I have the time to get involved, I’m 
going to try to maintain an oversight 
function and let the facilities manager 
handle the physical security. 

This is actually my first job in which 
I'll hold the title of manager. I’ve had 


so 
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THISWEEK'SGLOSSARY | 


SSH: Secure Shell is an industry stan- 
dard program that provides for encrypt- 
ed remote user sessions and allows 
users to create public and private keys 
to control sessions. Both commercial 
and shareware versions are available 


SecurlD token: A randomly assigned 
number, assigned by a small device the 
size of a credit card, that can be used in 
combination with a personal identifica- 
tion number to provide an additional 
level of authentication for resource 
access 


RADIUS server: Remote Authenti- 
cation Dial-in User Service (RADIUS) 
allows multiple servers and devices to 
pass authentication information to a 
single machine. A RADIUS server con- 
tains the authentication information. 


Two-factor authentication: An 
authentication scheme that requires 
users to divulge something they should 
know and something that they have or 
“are.” A normal user ID and password 
pair isn’t considered two-factor authen- 
tication, but a user ID/password com- 
bined with a digital token or a finger- 
printing scanner is. 


Man trap: This is usually a corridor in 
the computer center that traps intruders 
in the event that they are able to bypass 
initial physical security controls. 


LINKS: 


www.iss.net: Internet Security 
Systems Inc. 


www.enterasys.com: Enterasys 
Networks Inc. 


www.nfr.com: NFR Security Inc. 


www.securitywizards.com: 
Network Security Wizards Inc. 


www.f-secure.com: F-Secure Corp. 


www.rsasecurity.com: RSA Security 
Inc. 


www.tripwiresecurity.com: 
Tripwire Inc. 


www.cisco.com: Cisco Systems Inc. 


management responsibilities before, but 
never the title or budget. With a limited 
budget and worldwide presence, main- 
taining a robust security infrastructure 
will be a challenge. The rest of the week 
will be spent meeting staff, getting ac- 
quainted with our infrastructure and 
calling vendors to start the negotiations. 
I’m the security manager, and I’ve got 
some money to spend. D 





w This week's journal is written by a real security manager, “Mathias Thurman,” whose name and employer have been disguised for obvious reasons. It’s posted weekly at www.computerworld.comto help you 
and our security manager better solve security problems. Contact him at mthurman@hushmail.com or head to Computerworld.com's Security Manager's Journal interactive forum 
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Two outstanding models give 
you quite a choice in both size 
and price. By Russell Kay 


OU CAN NEVER 
be too rich or too 
thin, the saying 
goes. That same 
observation can 
be applied to notebook com- 
puters as well. Recently, I've 
been using two systems that 
exemplify those two ends of 
the notebook packaging spec- 
trum. One is rich — a big, do- 
everything desktop replace- 
ment that’s remarkably inex- 
pensive, by traditional laptop 
standards. The other is thin — 
a light, 1-in.-thick ultraport- 
able that’s aimed at the road 
warrior who’s willing to trade 
some features or flexibility to 
lose significant weight. 
Obviously, these two ma- 
chines don’t compete with 
each other. They’re designed 
to meet different users’ needs, 
and each does a very good job 
within its specific niche. 


SATELLITE 2805 


= Toshiba America Information 
Systems Inc., irvine, Calif. 

= www.toshiba.com 

= Starts at $1,299 

The big bruiser here is Toshi- 
ba’s Satellite 2805, and it is big. 
With a 14-in. screen, plus both 
DVD and floppy-disk drives, it 
checks in at 7.3 lb. Yet its price 
(after a couple of recent drops) 
is just $1,799. The unit I tested, 
Model $301, has a 650-MHz 
Pentium III CPU, 128MB of 
RAM and a 10GB hard drive. 
Toshiba has announced a re- 
fresh of this model, with a 


700-MHz processor and 10GB 
hard drive. A 650-MHz Celer- 
on-processor-equipped model 
with 64MB of RAM, a 6GB 
hard drive and a DVD drive is 
available for $1,299. 
The Satellite 2805 has 

everything built into one box, 
and it makes a great and eco- 


nomical desktop replacement. 


With its included 56K bit/sec. 
modem and Ethernet port, it’s 
ready for business. The key- 
board is good, the screen’s 
large and bright, and you can 
get it with a 15-in. display for 
a few hundred dollars more. 
The built-in floppy drive — 
something that’s becoming 
increasingly rare — is quite 
convenient for minor back- 
ups, “sneakernet” transfers 
and installing the occasional 
bit of software or a hardware 
driver that comes on a floppy 
disk. 

The sound on the Toshiba is 
remarkably good. Credit for 
that goes to the inclusion of 
two good stereo speakers and 
a subwoofer (though it feels 
strange to use that term for 
any speaker small 
enough to fit ina 
laptop). In fact, 
when this 
model was un- 
der development, the 
designers discovered that the 
subwoofer delivered enough 
bass energy to cause vibration 
problems with the internal 
hard drive. They fixed that 
problem, of course, but the 


computer does provide good- 
sounding bass that’s all out of 
proportion to the unit’s size. 
Not that you can forget that 
size, which is considerable. 
This is the biggest (though not 
the heaviest) laptop I’ve ever 
dealt with. The optional 15-in. 
screen doesn’t visually over- 
power the rest of the unit (as 
with some other big-screen 
laptops), because everything 
here is on a massive scale. 
This unit won't even fit into 
many laptop carrying cases. 
But its size allows for a full- 
size keyboard and three built- 
in drives. It dwarfs my Dell 
Latitude, which I’ve always 
considered large. You don’t 
want to carry this one very far, 


but once you're settled down 
and working on it, it’s a nice 
system. 


OMNIBOOK 500 


= Hewlett-Packard Co. 

® www.hp.com/omnibook 

® Starts at $1,844 

The lightweight lad here is HP’s 
new Omnibook 500, which I'd 
describe as HP’s counterpart 
to the IBM ThinkPad X20 
(Technology Hands On, Oct. 
16]. With a 12-in., 1,024- by 768- 
pixel Extended Graphics Ar- 
ray (XGA) screen, it’s just 1 in. 
thick, weighs only 3.5 Ib. and 
starts at $1,844 with a Celeron 
500-MHz CPU and a 7.5GB 
hard drive. 

Included in the package is a 
2-lb. multimedia base that 
holds both floppy and extra- 
cost optical drives. The note- 
book clips securely onto this 
base, making a total package 
that still weighs less than most 
notebooks on the market. The 


two-piece design lets you pack | 


the base in your checked lug- 

gage when you're traveling, so 
you need only carry the light- 
weight Omnibook. 

In many ways, the Omni- 
book 500 incorporates the best 
features from its competitors 
(including Toshiba’s Portege 
3480CT) while eliminating 
their weaknesses. Like the 
ThinkPad, it has a good key- 
board, a 12-in. screen and a 
versatile multimedia base. But 
even in its cheapest model, the 
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Omnibook . screen is some- 
what brighter and has full 
XGA resolution; the Celeron- 
based ThinkPad gives you 
only Super VGA (800 by 600 
pixels). 

Unlike the Portege 3480CT, 
the Omnibook’s multimedia 
base is really usable. (The 
Toshiba’s holds only an extra 
battery, with no drives at all). 
And the 12-in. screen certainly 
beats the Portege’s 10.4-in. dis- 
play. The Toshiba’s floppy and 
optical drives hang off the sys- 
tem on special cables. 

I didn’t like the latch that se- 
cures the HP’s display; I found 
it unnecessarily hard to open. 

Finally, I really like the Om- 
nibook’s use of a light-gray 
color on the case and key- 
board. I’m tired of black and 
charcoal-gray laptops; for me, 
HP’s lighter color scheme is 
more pleasant to use, especial- 
ly if I’m in an environment 
with subdued lighting. 

It should be clear that I real- 
ly like the Omnibook; it’s the 
class of notebook that I find 
most appealing, combining 
full features with light weight. 
The only real drawback is a 
“small” 12-in. screen. In fact, I 
remember reviewing in 1996 
(but not for Computerworld) 
the first notebook computer to 
use a 12-in. screen, and it 
seemed simply enormous at 
the time. Now, a 12-in. screen 
is considered small. Well, 
small is beautiful, too. D 
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HAT DETAIL of 
your private life 
would you least 
like to see 
splashed across 
the Internet? Or 
added to a data- 
base, linked to 
your name and sold in a mailing list? 

Your concern could become a source 
of amusement to your grandchildren, 
because by then, “privacy as we know it 
won't exist,” predicts Nick Jones, a Lon- 
don-based research director at Stam- 
ford, Conn.-based Gartner Group Inc. 

Global Positioning System devices 
may track your every move. Always-on 
communications will keep you reach- 
able. Ubiquitous video-monitoring soft- 
ware will note changes in your behav- 
ior. Your financial, medical and other 
data will be collected from halls of 
records, hospitals, your doctors’ offices, 
banks, the schools you attended, your 
employer and dozens of databases and 
placed in a single smart card. Use the 
card at your local gas station and you 
could expose those personal records. 

In fact, much of that is already hap- 
pening and raising some alarm, says 
Franklin S. Reeder, chairman of the 
Computer System Security and Privacy 
Advisory Board, which advises Con- 
gress and federal agencies. 
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social life of Finnish teens.” Teens use 
SMS to stay in constant touch with 
their peers. 

Within 10 years, “40% of adults and 
75% of teens will have always-on, wear- 
able computing and communications 
capabilities,” says Jackie Fenn, another 
Gartner analyst. “Social constellations” 

— groups of colleagues, friends and 
family — will use IT to stay informed 
of one another’s whereabouts and ac- 
cessibility, she says. A built-in video 
camera, already developed as a proto- 
type by San Francisco-based Levi 
Strauss & Co., will let others see what 
you see as you see it, engendering a 


Kn sare eye, aye en Privacy as we know it 


Today, for the price of a Web camera 
(about $99), hundreds of individuals mM ’ . Q ~ J 
offer an intimate view into their lives at t 7 
on the Web at www.citizenX.com. ” 

CitizenX participant and digital f W S a S“0 
artist Steve Lareau is matter-of-fact 0 ire eS » | a W n 
about the webcam he says he’s had , ~ = 

) 7 5 
trained on himself for “quite a few Col } i Mm bi Nn icatio ns. 


years. I just unplug it or turn the cam . . 
ae By Sami Lais 
Video monitoring is already so com- } 


mon as to be unremarkable, Jones says. 
“The average New Yorker is photo- 
graphed something like 23 times a day” 
by video cameras in stores, offices and 
public buildings or by traffic cameras 
on the street, he says. 


The federal government is ——— “It’s funny,” Reeder says. 


responding by passing such 
laws as the Health Insurance 


Portability and Accountability SPRIVACY 1984, but there was not a huge 


Act, which requires health care 
organizations to protect the confiden- 
tiality of patient information. 

But while discussions continue 
about the role of the federal govern- 
ment in protecting privacy, the impor- 
tance of building choice into IT has 
emerged as an equally important issue, 
Reeder says. “As people want more 
convenience and are willing to accept 
greater levels of intrusion to get that 
convenience, we have to be able to let 
them choose that. At the same time, we 
need the option to preserve anonym- 
ity,” he says. 

“Our view of what we're willing to 
show to the world varies from individ- 
ual to individual, and it’s probably a 
moving target,” he adds. 


Social Requirement, Not a Skill 
That target will continue to move, 
says Jones. Once the major opportuni- 
ties for using IT to improve industrial 
and business processes have been ex- 
hausted, “the main driver for the adop- 
tion of an advanced technology will be 
the degree to which it satisfies the 

higher human needs,” he says. 
“Technoliteracy will be a social re- 
quirement, not a job skill.” 

For example, Jones says, Short Mes- 
sage Service (SMS), a wireless messag- 
ing system allowing up to 160 charac- 
ters, overnight became “integral to the 


“We resist the picture of soci- 
ety George Orwell painted in 


hue and cry when cameras 
were mounted at stoplights.” 

The perceived benefit to the public 
— nabbing reckless drivers — offsets 
the intrusion, Reeder speculates. “Indi- 
viduals have a history of giving up 
some rights to privacy in exchange for 
the benefits of being part of a society.” 

Researchers in London’s Under- 
ground public transit system are sav- 
ing lives by using video cameras and 
behavioral indicators to identify poten- 
tial suicides, Jones says. “Researchers 
have found they tend to hang around 
the end of the platform for a while be- 
fore they make their attempt,” he says. 








As beneficial as such projects may 
be, however, they’re like a genie let out 
of the bottle. By analyzing surveillance 
tapes and correlating the information 
to a database of known characteristics 
of individuals, an insurance company 
might note that you're gaining weight, 
thereby increasing your risk of heart 
attack, and use that information to jus- 
tify raising your rates, Jones says. 

Even now, an insurance company, 
through mining of public records, can 
find out if one of its customers has 
bought a car, says Fenn. It then has a 
couple of options. The company can 
contact him, she says, “and say, ‘Hey, 
we see you just bought a new car and 
we'd like to offer you a good deal on 
insuring it’” — an approach the cus- 
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his privacy. Or the insurer can send the 
customer a blind offer on a good deal 
insuring a car, she says. The response 
elicited might be more like, “Hey, isn’t 
that a coincidence. I just bought a car, 
and here’s this good deal on insurance 
for it.” Good idea? 


Bad idea, says Alan Neustadtl, a soci- | 


ology professor at College Park, Md.- 
based University of Maryland who is 
studying the effects of the Internet on 
society. “I think ultimately, people 
want some kind of honesty,” he says. 
“To deny you know and then have peo- 
ple find out you knew would be worse. 
Then you're a corporate voyeur.” 

It comes down to individual percep- 
tions, says Reeder. “What constitutes 
an invasion of privacy to one person is 
a welcome convenience to another.” 

Tollbooths can read smart tags on a 
car and let it breeze through without 
stopping, but that “notionally give[s] 
the government the ability to track you 
anywhere you go,” Reeder says. 

“What’s important here is choice,” he 
says. Those who want the convenience 
can opt in; those who see it as an intru- 
sion “simply don’t get a smart tag.” 

The conventional concept of privacy 
— of simply making sure information 
isn’t disclosed — is much too narrow, 
Reeder says. Privacy is also “about 
making sure information is properly 
authenticated. It’s about protecting the 
accuracy of information even though it 
may be public, such as [on] a Web 
site,” he says. 

Under the terms of the Paperwork 
Elimination Act, federal agencies must 
put publicly available information on- 
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line. Nationwide, states and municipal- | 


ities are following suit. 

“You can go online and find out 
what someone paid for their house, get 
property tax information, tax assess- 
ment information, see who signed on 
the loan — it’s all public,” Neustadl 
says. While such information histori- 
cally has been public, locating it has 
been time-consuming. 

“Where once the only people who 
looked at it were lawyers doing title 
searches, now it’s immediately avail- 


able to the merely curious,” he says. “In | 


some sense, nothing has changed. But 
that’s in theory. Reality is different.” 


Public Perception at Issue 


Agencies and enterprises must also 


address the public’s perception of their | 


ability to interact safely over the Inter- 
net, Reeder says. 

In the late 1990s, the Social Security 
Administration (SSA) mounted a Web 
application that let people request a 
copy of their personal estimated bene- 
fits earning statement, which was then 
sent by conventional mail. “SSA wasn’t 
doing any more online than you could 
already do with a postcard,” Reeder 
says. “In fact, it could be said that the 
paper version had fewer safeguards.” 
But the public perceived it differently 
and raised an outcry that shut down 
the application within a few days. 

Concern over how an individual's 
online identity is used and who owns 
the data has continued to escalate, es- 
pecially within the past year, says Ara- 
bella Hallawell, an analyst at Gartner. 

“Every click from the consumer of 
[digital TV and interactive advertising] 





will bring a wealth of demographic 


data,” Hallawell says. Broadcasters will | 


be able to build databases that will be 
“a lucrative potential source of rev- 
enue.” And “this will generate interest 
by regulatory bodies concerned with 
invasion of privacy” nationally and in- 
ternationally, she says. 

“The U.S. has strong regulations on 
personal data protection in the public 
sector but no comprehensive legisla- 
tion for the private sector,” Hallawell 
says. “As the international community 
begins to agree on privacy standards, 
the U.S.’s laissez-faire attitude on pri- 
vate-sector treatment of personal data 
looks isolationist.” 

Wireless and mobile services will 
raise new privacy issues international- 
ly, Jones says. “What happens when 
you have a database on your [personal 
digital assistant], and you travel from 


| one jurisdiction to another? Which 


rules will apply?” 

Erroneous or inadvertent transmis- 
sion of data or its storage location will 
also test privacy laws, he says. 

But such legal, technological and so- 
cietal issues surrounding privacy may 
ultimately prove transitory, Neustadtl 
says. How people view privacy “may 
not be so different from what existed 
100 years ago,” he says. For example, 
light telegraphy was used to send mes- 
sages across France. “As a communica- 
tion medium, it was very public in the 
sense that anyone could observe it, so 
there was always the potential to com- 
promise the privacy of the message,” 
says Neustadtl. “People are coming to 
understand the Internet as a communi- 
cation medium is much the same.” D 





Matter 
Policy 


Policies that govern how security is im- 
plemented will determine the future of 
privacy more than privacy laws or IT it- 
self, say security vendors, analysts and 
private and federal watchdog agencies. 

Organizations may seek to protect per- 
sonal data, says Andrew Shen, an analyst 
at the Electronic Privacy information 
Center in Washington, but “without the 
security, they can’t guarantee privacy.” 

Among privacy-protecting technolo- 
gies, encryption will lead, says Alan 
Paller, research director at the SANS In- 
stitute in Bethesda, Md. Encryption will 
be “built into the transmission system 
and hardware,” he says. 

And authentication will be crucial, 
says Clint Kreitner, president and CEO of 
the nonprofit Center for Internet Security 
(CIS) in Bethesda, Md. For good authen- 
tication, “you need to have something, 
and you need to know something,” he 
says. Smart cards, which have micro- 
processors for data exchange and re- 
quire passwords, may see wider use. 

Not so with biometrics, says Paller, 
because an electronic fingerprint can be 
illegally captured during transmission 
and reused. 

“Connecting any machine that has in- 
formation assets exposes those assets to 
compromise, and there are not enough 
knowledgeable people to fix the holes. IT 
vendors ship products with a default of 
security measures open rather than 
closed,” Kreitner says, because other- 
wise “most customers are not knowi- 
edgeable enough to implement the prod- 
uct without great amounts of support.” 

To plug that knowledge gap, the CIS is 
developing specific lists of operating 
system settings that constitute a base- 
line level of prudent security practices. 

Release of the first set of free baseline 
security practices will be in early April, 
for Sun Microsystems Inc.’s Solaris op- 
erating system. Lawsuits will follow re- 
lease of the CIS baseline practices, 
Paller says, that argue that “minimum 
security practices were well known, you 
didn’t implement them, and your care- 
lessness took down my company.” 

Security isn’t so much a technology 
issue as it is “a process issue,” says 
Shen. Even if you know how to imple- 
ment security, “you can’t simply put in 
new software and let it run,” he says. 
“You have to make sure people are 
maintaining the system.” 

Business and legal managers should 
set security policies based on a collec- 
tive social, political, legal and business 
view, says Yogesh Gupta, chief technolo- 
gy officer at Computer Associates Inter- 
national Inc. in Islandia, N.Y. But often 
they don’t, and responsibility is thrust 
upon IT managers. 

~ Sami Lais 





BY PETE LOSHIN 
UST ASK any economist: 
When a commodity is 
in short supply, several 
things happen. The price 
goes up, rationing be- 

gins, and people start 
scrambling for substitutes. 

Globally unique Internet ad- 

dresses, usually called Inter- 

net Protocol (IP) addresses, 
are no exception. 

The Internet Engineering 
Task Force has been aware of 
the impending depletion of the 
current address space, called 


IPv4, for almost a decade. Al- | 





though the forthcoming IPv6 is | 


still seen as the long-term solu- 


tion for continued 


Internet | 


growth, other short-term fixes | 
have been institutionalized in | 


the past several years. 


RFC 1631, “The IP Network 


Address Translator,” pub- 


lished in 1994, describes one | 
such fix. In the early days of the | 
Internet, people were urged to | 
apply for globally unique net- | 
work addresses regardless of | 


whether they ever intended to 
connect to the global Internet. 
The idea was to avoid problems 
when a formerly private net- 
work was eventually hooked up 
to the public Internet. 

As the Internet continued to 
grow exponentially, however, 
assigning perfectly good net- 
work addresses to private net- 
works came to be seen as a 
waste of valuable virtual real 
estate. Under the Network Ad- 
dress Translation (NAT) stan- 
dard, certain IP addresses are 
set aside for reuse by private 
networks. As specified in RFC 
1597, “Address Allocation for 
Private Internets,” anyone can 
use addresses in the following 
ranges: 10.0.0.0 to 10.255.255.255; 
172.16.0.0 to 172.31.255.255; and 
192.168.0.0 to 192.168.255.255. By 
convention, routers aren’t sup- 


posed to forward any packets to | 
| et headers, changing the pri- 


these addresses on the Internet. 

The simplest NAT device 
has two network connections: 
one on the Internet and one on 
the private network. Hosts 
within the private network, us- 
ing their private IP addresses 
(sometimes also called Net- 
work 10 addresses, from the 
10.0.0.0 address set aside for 
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HOT TRENDS & TECHNOLOGIES IN BRIEF 


Network Address ‘Translation 


DI] 


| 


Network Address Translation (NAT) is the standard 
method used to map IP addresses from one address- 
ing realm (e.g., a private intranet) to another (e.g., 
the Internet). NAT allows hosts inside an organiza- 
tion’s private intranet to reach hosts transparently 
in the public realm, without requiring those inside 
hosts to have a registered (and increasingly scarce) 


Internet address. 


NAT-ENABLED ROUTER 
10.25.11 ) 








NAT in 
Action 


INSIDE NETWORK 


The NAT-enabled router in this diagram has an IP address of 10.25.1.1 for the inside network and an 
address of 126.22.99.144 for the outside network. Anytime a host on the inside network (10.25.1.x) 
makes a request to the Internet, the NAT device will translate the 10.25.1.x to 126.22.99.144. The 
internal machine can directly access any host on the external network, while from the outside, it 
appears that all outbound traffic is originating from the router's single IP address. 


10.25.1.7 





private use) connect to the In- 
ternet by sending packets di- 
rectly to the NAT device. Un- 
like normal routers, which 
merely read the source and 
destination addresses on each 
packet before forwarding them 
to their destinations, NAT de- 
vices actually modify the pack- 


vate network source address 
into its own Internet address. 


NAT Drawbacks 


In using NAT, hosts on the 
Internet appear to be commu- 
nicating directly with the NAT 
device rather than with the ac- 
tual host inside the private net- 





work. Inbound packets are 
sent to the NAT device's IP ad- 
dress, and the device changes 
the destination packet header 
from its own Internet address 
to the private network address 
of the true destination host. 
The result is that, in theory, a 
single globally unique IP ad- 
dress can front for hundreds, 
thousands or even millions, of 
privately addressed hosts. In 
practice, however, there are 
drawbacks. For one _ thing, 
many Internet protocols and 
applications depend on the 
network being truly end-to- 
end, with packets forwarded 
entirely unmodified from the 





source to the destination. The 
IP security architecture, for 
example, can’t work across a 
NAT device because the origi- 
nal headers, with original IP 
source addresses, are digitally 
signed. Change the source ad- 
dress, and the digital signature 
is no longer valid. 

NAT raises administrative 
challenges as well. Although 
NAT is a nice solution for an or- 
ganization, branch or even a de- 
partment that can’t get enough 
globally unique Internet ad- 
dresses, it becomes a huge 
problem when reorganizations, 
mergers or acquisitions require 
the consolidation of two or 
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more private networks. Even 
when organizational charts are 
stable, NAT systems can inad- 
vertently be nested, causing 
routing nightmares. 


Beyond the Device 

While hosts inside a private 
network usually connect easily 
with servers on the outside, 
hosts on the Internet can’t al- 
ways easily connect to servers 
within the network. As far as 
external hosts are concerned, 
they’re communicating direct- 
ly with a single host — the 
NAT device itself. The private 
network is effectively invisible 
to the outside world, which 
thinks all traffic from that net- 
work is actually traffic origi- 
nating and terminating at the 
NAT device. 

Network Address Port Trans- 
lation (NAPT) helps alleviate 
this problem by translating not 
just the IP address but also the 
transport layer port. Thus, an 
inbound packet addressed to 
Port 80 (usually used for 
HTTP packets) on the NAPT 
device could be translated and 
passed along to the private net- 
work’s Web server. Without 
port translation, the NAT de- 
vice has no way of knowing 


| which host in the private net- 


work to pass such packets to. 

NAT is often positioned as a 
security solution. After all, the 
private network seems to be 
hidden from view. However, if 
an attacker can gain control of 
the NAT device, the entire net- 
work is vulnerable. NAT 
shouldn’t be considered a re- 
placement for a firewall, though 
simple devices implementing 
NAT can be useful for protect- 
ing small office and home office 
networks. 

Although NAT fans _pro- 
claim it as the long-term solu- 
tion to the IPv4 address short- 
age, it remains a short-term fix. 
Ignoring architectural and de- 
ployment problems, the IPv4 
address space itself is still fi- 
nite and would soon be over- 
whelmed if all networks were 
hidden behind NAT devices. D 





Loshin is a freelance writer in 
Arlington, Mass. Reach him at 
pete@loshin.com. 
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Content Key for 
IY Support Service 


Breadth of services is what attracts users 
to Attenza’s computer support portal 


BY EMILY KAY 
IGHTEEN MONTHS 
and $500,000 into 
the implementation 
of an IT online help 
desk support sys- 

tem, Visa International Inc 

dumped its project in favor of a 


mix of customized online sup- | 
port services that includes tu- | 


torials, instant tips 
support and training content 
from Dallas-based Attenza Inc., 


and other | 


formerly known as Service9I1.- | 


com Inc. 

The original system “took a 
lot of effort to implement, and 
it turned out it was kind of an 
empty shell,” says Lloyd Stead- 
man, chief consultant in net- 
work integration at the Foster 
City, Calif.-based credit card 
company, which has 21,000 
financial institution members. 
“There was no compelling con- 
tent,” he says. 

“When it comes to self-help 
sites, content is everything,” 
says Steadman, and “Attenza 
has a huge wealth of content.” 

What the start-up offers Visa 
and many other large corpo- 
rate clients is a variety of Web- 
based computer support ser- 
vices that includes live chat 
with technicians, e-mail sup- 
port and video, and text tutori- 
als, says Lawrence Schwartz, 
founder and CEO of Attenza. 
And a series of acquisitions, 
including the purchase of on- 
line learning content develop- 
ers Learnlots.com and Biz- 
Works Inc., has built up Atten- 
za’s tutorial library. 

The e-support service is 
available for in-house IT help 
desk functions or can be 
repackaged to transparently 
serve a company’s external 
customers. Through what it 
calls its Webskin content de- 
livery infrastructure, Attenza 
claims that it can deploy with- 
in days a private-label corpo- 
rate product that includes a 
customized look and feel. 

That was attractive to Glen 
Hamilton, business and prod- 


uct development vice presi- 
dent at Egghead.com Inc., an 
online computer hardware and 
software reseller in 
Park, Calif. 

Egghead licenses its online 
support content from Attenza, 
but customers “know they’re 
coming to us,” 


Menlo | 


| Hamilton says. 


says Hamilton. | 


“Our brand name adds some 
legitimacy to the content.” 

But Attenza’s content was 
also important, he says. “When 
we were [deciding whether to] 
build and maintain our own 
system, we were pleased to 
find a company like Attenza, 
which specializes in [online 
support] 
Customers at 


customer content,” 
the Egghead Web site can use 
Attenza’s step-by-step instruc- 
tions or view short videos on 








“TODAY, WE do a lot of things other than service,” says Lawrence 


Schwartz, founder and CEO of Attenza. 


Attenza Inc. 
Location: 1525 North Stemmons 
Freeway, Dallas, Texas 75207 








The technology: Web-based IT 
help desk support and electronic- 
learning services 


Why it’s worth watching: The 
shortage of technical-support pro- 
fessionals makes outsourcing help 
desk support attractive. 








Company officers: 

¢ Lawrence Schwartz, founder, CEO 
and chairman 

Mark Thompson, president 

¢ Ray Balestri, chief operating 
officer 





Milestones: 

©1996: Company founded as Fixx 
MyPC 

1999: Name changed to Ser- 
vice911.com; focus shifted to Inter- 
net-based support 

©2001: Changed name to 





Attenza Inc. 


Employees: 7 


Approximately100 C mM 


Burn money: $33 
million from W.R. Ham- 
brecht and Co., CNET 
Networks Inc., ZDNet, Ask 
Jeeves Inc., Richmont Capital Part- 
ners LLP and others 





Services/pricing: Setup and 
development fees of $50,000 to 
$100,000, plus usage and monthly 
maintenance and hosting fees. 





Customers: Egghead.com, 
American Airlines Inc., Exxon Mobil 
Corp., Mary Kay Inc., Visa Interna- 
tional and others 





Partners: BancTec Inc., Buy.Com 
Inc., McAfee.com Corp. and Sup- 
port.com Inc. 


Red flags for IT: 

* Service requires a working PC 
connected to the Internet. 

With no telephone support, the 
service is a help desk supplement 
rather than a replacement. 








cone? 
Opbhedds ©. 


CMe 
Ting 





subjects such as how to install 
memory. 


Hamilton says he expects the | 
service to substantially reduce | 


customer support calls, al- 
though neither he nor Schwartz 
could quantify the benefits yet. 
Hamilton says he sees Web-en- 
abled customer support as “a 
strategic tool to maintain 
smooth internal and external 
operations and remain compet- 
itive.” So far, Hamilton says, 
he’s happy with the service. 
Other e-support providers 
offer customized 
well, says Tony Adams, an ana- 
lyst at the IT services group of 


Gartner Group Inc. Webskin is 
simply 
vate branding,” he says. 
tent 


Analysis and Reporting 


| System (CAARS), which it says 


enables companies to monitor 
and analyze service usage by 
tracking user support histo- 
ries, chat sessions and e-mail 
communications. Each user in- 
teraction updates the knowl- 
edge builder for that client. 
Egghead and Visa aren’t us- 
ing CAARS yet, but both say 
they plan to do so. Steadman 
says he hopes to use it to iden- 
tify areas where better staff 
training is needed. 
Attenza has a long list of 
large corporate customers and 
has grown 100% annually, 
says Ana Volpi, an ana- 
¢ y* lyst at IDC in Framing- 
© ham, Mass. She calcu- 
lates that Attenza’s 
44 revenue doubled from 


aNies $2 million in 1999 to $4 
i. Pr» Ak 4* 


million last year. 

Schwartz says he ex- 
pects Attenza to show a profit 
late this year. 

Attenza is currently looking 
for new growth areas. “Today, 
we do a lot of things other 
than service,” Schwartz says. 
“We do ... e-learning, custom 
content creation, business in- 
telligence based on user infor- 
mation, all on an outsourced 
basis.” 

Schwartz adds that he also 
hopes to use CAARS to sell 
Attenza’s services to hardware 
manufacturers, which could 
use the reports to identify 
product problems and sup- 
port issues. D 





Kay writes about technology as 
a principal at Choice Communi- 
cations, an editorial consulting 
firm in Chelmsford, Mass. 
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the buzz 


STATE OF 
THE MARKET 


Competition 
By Attrition 


E-support is where it’s at. The e-support 
market will explode from $986 million 
this year to $4.1 billion by 2004, predicts 
Ana Volpi, an analyst at IDC. But that 
doesn't make the business easy. Com- 


: | petition among third-party support por- 
service as | 


tal vendors is “fierce and growing,” she 


| says, and some consolidation has al- 


| ready occurred 
San Jose-based Dataquest, a | > 


unit of Stamford, Conn.-based | 


Volpi defines e-support services as 
Internet destination sites where third 


“ ; | parties - not software or hardware ven- 
another name for pri- | ; ‘ 

| dors - offer technical-support data on 
ot , | software and hardware technologies. 
Attenza also offers the Con- | 


Attenza and its competitors share 
several attributes, although only a few 
offer Attenza’s broad range of services. 
For example, not every vendor offers 
online learning services and cus- 
tomized activity reporting. However, 
some offer telephone and on-site sup- 
port options - something Attenza 
doesn't. 

E-support businesses will continue to 
thrive as long as the shortage of skilled 
technical workers continues, Volpi says. 
“Vendors and corporations need to pro- 
vide technical support 24/7,” she says. 
“People are becoming increasingly 
mobile and traveling worldwide, and 
they need tech-support help.” 

But attracting and retaining skilled 
technical-support workers is a challenge 
for support providers as well as their 
customers, says Tony Adams, an analyst 
at Dataquest's IT services group. “Many 
service vendors have gone belly-up 
because of problems keeping their 
workforces happy,” he says. 

And although the market is expand- 
ing, it’s also crowded, and a consolida- 
tion has already begun. In addition to 
Attenza’s recent acquisitions, PCsup- 
port.com Inc. acquired MyHelpdesk Inc. 
last year, says Adams. 


ePeople Inc. 
Mountain View, Calif. 
www.epeople.com 


EPeopleis an online exchange that 
matches technical-support providers 
with users and offers a Web-based 
e-support front-end system for corpo- 
rate users that leverages its network of 
support providers. 


PCsupport.com Inc. 
Norwood, Mass. 
www.pcsupport.com 


PCsupport.com offers technical support 
services for hardware and software via 
live chat, e-mail and the telephone. 

- Emily Kay 
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CRM at the Speed of Light: “Get CRM right and your company wins in the online 


Capturing and Keeping 4 a . ” 
Customers it ae economy. Get it wrong and you are not even in the game. 
Pau. GREENBERG —Peter Keen, 

$ 9 President, Keen Innovations and author of 
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> Another day in the lightning fast world of electronic 

customer relations, where customers make instanta- 
Li dargokles sucht tga saith. a aiacebaedeea Md sighs neous decisions that.can last a lifetime. To succeed, 
COMPUTERWORLD you need to satisfy a whole-new set of needs—those 
of the online customer. CRM at the Speed of Light 


gives you solid information.and straightforward advice 


Sponsore on building and maintaining lasting customer relation- 
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Wa light years to come 


SALES ACT! : 
LOGIX 


HEN HE WAS 
a young boy, 
David Holland 
used to dream 
about a magic 
book. “The pictures on its 
pages moved, and the people 
in it talked,” “Maybe 
that influenced me somehow.” 
Maybe. Today, as a Web 
application developer at Dark 
Horse Comics Inc. in Mil- 
waukie, Ore., Holland makes 
comic books come alive for 
the thousands of fans who vis- 
it the company’s six Web sites. 
There, they can see exclu- 
sive animated serial movies, 
read online comic books, join 
discussion groups, download 
screen savers and games, sign 
up for free e-mail and order 
print comics, art, memorabilia 
and other merchandise related 
to fantasy and adventure en- 
tertainment ranging from 
Buffy the Vampire Slayer to 
The Ring of the Nibelung. 
But what the public sees is 
only part of what Holland is 
responsible for as a Web appli- 


he says. 


cation developer. He also cre- 
ates and maintains internal 
browser-based applications 
that support the site and Dark 
Horse’s business, from content 
management tools for editors 
to sales reports for accountants 
to an inventory management 
system for the IT department. 

“It’s equally important to 
make a site that people out- 
side the company can use easi- 
ly and to satisfy our internal 
customers’ needs for applica- 
tions,” Holland says. 

Achieving those goals re- 
quires a Web application de- 
veloper to be proficient in 
much more than writing code 
and using technology: The de- 
veloper must also be part mar- 
keting strategist, part business 
strategist and always focused 
on the customer. 

“You cannot hide from the 
customer,” Holland says. “Our 
customers know their materi- 
al, and they’ll let us know if we 
do something wrong.” 


Team Play 

At Dark Horse, Holland is 
one of nine members of an 
Internet team that includes 
developers, designers and 
specialists such as content 
editors and Flash multimedia 
artists. They must all work to- 
gether with Dark Horse’s edi- 
torial staff to create successful 
public sites, so communica- 





tions skills and teamwork are 


HNOLOGY 


important aspects of his job, 
Holland says. 

“I learned to put my own 
ego aside,” he says. “A lot of 
programmers guard their little 
trade secrets, but there’s no 
room for that here.” Instead, 
Holland says, the Internet 
team members share their ca- 
pabilities with one another, as 
well as with other Dark Horse 
employees. 


For example, the Dark Horse | 


editors continually create 
content for the site, from inter- 
views with comic book au- 
thors and artists to announce- 
ments about upcoming re- 


leases. Holland says the Inter- 
net team realized it could help 
editors by building them a tool 
that enables them to create 
content, test and review it, 
then schedule it for automatic 
posting on a specific date to a 
company Web site. 
The team also supports 

Dark Horse’s brick-and-mor- 


and 


tar retail partners, creating a 
password-protected area on 
the company’s Web site at 
which retailers can check on 
their orders, account status 
and inventory levels. 

In addition, Holland and the 
Internet team are expected to 


Making - 


On 


Web 


As a child, David Holland was fascinated 


| with magic. Its influence was far-reaching, | 


_ impacting his approach to Web application | 
design for Dark Horse Comics. 
By Sharon Watson 


RAFAEL ASTORGA 





get into the mind of the Dark 
Horse customer so they can 
create cross links on each page 
of product content. That lets a 
fan who's checking out the lat- 
est Star Wars paperback for 
sale also see hyperlinks to 
pages selling original artwork, 
clothing and more books, 
which is all part of the compa- 
ny’s strategy to make each Web 
site a marketing tool for the 
other five Dark Horse sites. 
Holland and the Internet 
team regularly browse through 
the customer e-mail Dark 
Horse receives and also see 
results from minipolls con- 
ducted on the company’s Web 
sites. Customers can also pre- 
order products, and the team 
can judge from those orders 
which products are hot. 


| The Challenge of E-Commerce 
While a Web application 
| developer today needs these 


softer marketing and communi- 


cation skills, that doesn’t mean 
the technological challenges 
have diminished, especially if 
e-commerce is involved. 

For example, Holland says 
providing a real-time inventory 
function on Dark Horse’s sites 

a “really, really hard thing to 
do” because it involves track- 
ing not only Dark Horse’s 
inventory but also items from 
other suppliers, too. 

Another challenge is main- 
taining server response time 
on the Web sites. The Dark 
Horse site itself contains 
thousands of pages of archival 
data on virtually every comic 
book the publisher has issued, 
and users routinely conduct 
searches by author, series, 
issue date and other criteria, 
returning hundreds of pages 
of content. “Those are a pretty 
big load on the servers,” Hol- 
land explains. 

As a Macintosh shop, Dark 
Horse has been using WebCat- 
alog from Aliso Viejo, Calif.- 
based Smith Micro Software 
Inc. for e-commerce. But Hol- 
land says his company is re- 
searching more open, scalable 
server options, including Lin- 
ux and Unix. “We need to 
make the site handle through- 
put more quickly,” he says. 

He’s also looking forward to 
offering more 3-D animation, 
movies and interactive fea- 
tures once the majority of 
Dark Horse users have high- 
speed Digital Subscriber Line 
or cable modem Internet con- 
nections. 
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David Holland 


Job title: Web application developer 


Company and location: Dark Horse 
Comics Inc Milwaukie, Ore 


How he got the job: Holland had fan years 
of experience in e-commerce for an online 
jewelry store and had created interfaces for 
presenting items on eBay Inc. and for work 
ing with database systems. He also designed 
his own Web site, which served as an exam 
ple of his skills. 

Skills required: Good knowledge of the 
company's Web and e-commerce tools, flu 
ency in HTML, understanding of information 
design and structure, the ability to write ele- 
gant code and fluency in Perl or PHP server- 
side sc nipting languages. 


Key soft skills: Communications skills busi 
ness savvy, the ability to work as part of a team 
and the ability | to anticipate customer needs. 


Training eunded: Most of Holland's train 
ing was on the job; he taught himself HTML 
He says he expects his degree in computer 
graphics and animation to aid him as the 
nternet team adds more Flash and other 
multimedia features to Web s sites 


Job and calary potential: F Jolland s: says 
Web technology is “boundless” and he can 
see himself in this position for a long time: 
Demand - and pay - for Web application 
skills remain strong, he says, and developers 
can expect starting pay to range from 
$40,000 to six figures “if you're very skilled.” 
He noted that a colleague in the Bay area 

is offering Web application developers 

31 00, 000 and more to start 


Cnient path: Being a 1 Web a wares ation nina 
oper in a Web-based company provides the 
opportunity to learn about the overall busi- 
ness, as well as the information systems in- 
frastructure, to a detailed degree. “When | 
get more comfortable with e-commerce, | 
might want to move into management,” 
Holland says. 


Advice: “Find a company you wile enjoy ay eeerk 
ing for,” Holland recommends. Know that 
employers will review and critique the Web 
sites you've worked on to get a sense of 
whether you'll fit in with their firms 


“We have so much content to 
distribute, so we’re really rub- 
bing our hands with anticipa- 
tion over the prospect of more 
bandwidth,” Holland says. 

In the meantime, Holland 
says, he loves coming to work 
each day and literally rubbing 
elbows with the editors, writ- 
ers and artists who create Dark 
Horse’s products, while he, too, 
gets to use his creative talents. 

“The ability to create some- 
thing people can use and play 
with and comment on — even 
if negatively — is really its 
own reward,” he says. D 





Watson is a freelance writer 
in Chicago. 
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LEVEL 8 SYSTEMS INC, an 
industry leader in middleware & 
large-scale business application 
development, seeks: Software 
Developers, Product Specialis' 
Applic ation 

Engineers for the develop ment 
testing and ‘tect nical support of 
products and services. Positions 
may require travel throughout 
North America 90% of the time 
Competitive salary based on 
experience. Positions located in 
Cary, NC, New York, NY and 
Dulles,VA. Apply by sendir 
resume to Kathy Burnet, HR 
Department, Level 8 Systems 
Inc., 8000 Regency Parkway 
Cary, NC 27511 








Computer Professionals 


Capital Technologies, a 
Pennsylvania based company 
with branch offices in NJ, IL, OH. 
etc has multiple openings for 
both entry and experienced 
Programmer/System Analysts 
Software/Project Engineers 
DBA with any of the following 
skills: Informix Unix, SQL/SQL 
Server, GUI, DB2, CICS 
COBOL, C/C++, Oracle or 
Sybase, Powerbuilder, etc. Req. 
MS or BS with exp. Attractive 
salary with excellent benefits. 
Send resumes to: ATT: Ms. 
Elizabeth Grant 994 Old Eagle 
School Road, Ste 1010, Wayne 

9087 or 709 Stokes Road. 
Medford, NJ 08055 
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the fuel of 
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economy 
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ITcareers. 





IT careers and 
IT careers.com 
can put your 
message in front 
of 2/3 of all US 
IT professionals. 
If you want to 
make hires, 
make your way 
into our pages. 
Call Janis 
Crowley at 


1-800-762-2977 
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Database Administrator 
Engineering, maintair 
& Oracle 


monitoring, operations & 


Progress 
Jatabases, including 
Capacity 
plan upgrades, performance tun 
ing, development & 
assurance of database 
Required: Bachelor of Science 
»r foreign 
Comput Eng. or Math; with 
3 yrs w 
service provider or 3 yrs as UNIX 
perating system administrator 
Prior work m 
experience with Progress or 
Oracle databases, Cis 
TCP/IP, and UNIX operating 


) routers 


tem using Solaris and Linux 
irie Gardner 

( 30 

chtree Street, NW 


Atlanta, GA 30309 








SOFTWARE ENGINEER 
Software engineer to design 
develop and test computer 
programs for business applica 
t analyze software require 
ments to determine feasibility of 
design; direct software system 
testing procedures using expertise 
Forms 4.5, Oracle 7.3 
and Developer/2000. Require 
ments: Bachelor's Degree or 
equivalent in Computer Science 
or related field and two years 
e mperionce as a software engineer 
computer programmer 
knowle ge of Oracle Forms 4.5 
Orac 3 and Developer/2000. 
Salary: $66,000/year. Working 
Conditions: 8:00 A.M. to 5:00 
P.M., 40 hours/week, involves 
extensive travel and frequent 
relocation Apply: Mr. James J 
1, Beaver Falls Job Center, 
Ninth Avenue, Beaver 
PA 15010, Job No 
WEB150861 








SOFTWARE ENGINEER 


Software engineer Jesign 
develop and test computer 
programs for business applica 

tions; analyze software require 
ments to determine feasibility of 
design; direct software system 
testing procedures using expertise 
in Cold Fusion, JavaScript and 
SQL Server. Requirements 
Bachelor's Degree or equivalent 
in Computer Science or related 
field and two years experience 
as a software engineer or 
computer programmer, knowledge 
of Cold Fusion, JavaScript and 
SQL Server. Salary: $66,000/year. 
Working Conditions: 8:00 A.M. to 
5:00 P-M., 40 hours/week, involves 
extensive travel and frequent 
relocation. Apply: Ms. Mary Pat 
Curran, McKeesport/Allegheny 
Co. Careerlink, 345 Fifth Ave 

McKeesport, PA 15132, Job No. 
WEB150866 


SOFTWARE SUPPORT 
FOR STRATEGY 
CONSULTING 


Decision Architects, a 
Monitor Group Company, 
providing customized so 
solutions in support of strategy 
consulting, has an immediate 
need to fill a range of software 
database and IT positions in the 
Boston area 


llowing positions 
a Bachelor's degree 

equivalent) in Somp 
Science MIS 
Administration 
relevant field, and 
relevant experience 
the requirements 
below 


described 


PROGRAMMER — ANALYST 
and DATA BASE DESIGN 
ANALYST POSITIONS 


* Application Development 
Analyst (Business Systems) 
with experience building soft 
ware-based business analysis 
models, and a functional under 
standing of financial accounting 


* Data Base Design/ 
Application Consultant with 
experience in software develop 
data base admin 
performance 
Lite and Expres 
functional understanding 
financial accounting. 


Starting salaries range from 
$72,000 to $90,000 per year 
together with two weeks’ paid 
vacatic medical, dental, life 
and disability insurances, and 

ndustry-competitive 
benefits. 


Please mail or fax resume to 
Ms. Kathleen Jung, Recruiter, 
Decision Architects 

Park. Spree dato MA 

Fax: (617) 761-3660 

E-mail. 

Hire_Me @ Decisionarc.Com 
Visit: www.Decisionarc.Com 


Decision Architects, a sub- 
sidiary of the Monitor Company 
Group, is an equal opportunity 
employer. 


Atlanta 
yp and implement 
mathematical and 
gorithms, including 
alysis/forecasting 
siti-echelon replen 
arge-scale simulations. 
rks, geneti 
vector 
attern detection, and 


Design 


rategies and validation 
yes; Test data and create 
mputa 

J oftware 

Lead a team and 

snder limited 

Master's 


impute 
Software 
Engineer 


Software Engineer (Bethesda 
MD)- you will research, design 
and develop computer software 
systems, applying prir " 

techniques of computer science 
and mathematica 
analysis and carry out other 


engineering 


software engineerir 

Required: Master's 

Computer Science ¢ 

Systems or MIS or Engineering 

any type) or Science or Mathe- 

matics. 40 hours per week, from 

3:00 a.m 00 p.m. Salary 

commensurate 

Please send cover letter and 
MS, 10401 


ema 
adp @ hiresystems.com 
ohone calls, please. EOE 


ADP 


ie 


























Senior Consultant. Design 
development & implementation 
of software for management 
information systems. Application 
& technical consulting for SAP 
business modules. Technical 
environment: SAP R/3; ABAP/4 
MVS/ESA; COBOL; CICS; DB2 
JCL. MS in Comp. Sci.* + 6 mos 
exp in job offered or as Consultant 
req'd. (“MS in any engineering 
field + 6 mos exp in software 
development acceptable in lieu 
of MS in Comp. Sci.) Previous 
exp must include: SAP R/3 
ABAP/4, COBOL. Relocation to 
various & unanticipated worksites 
throughout U.S. 40 hrs/wk, 9am- 
5pm, $80,000/yr. Apply at the 
Texas Workforce Commission 
Houston, Texas, or send resume 
to 1117 Trinity, Room 424T 
Austin, Texas 78701, JO# 
TX1104918. Ad paid by an Equal 
Opportunity Employer 


Software Engineer 


Database Administrator to do 
logical and physical design of 
Oracle database; Code test and 
implement Oracle scripts applying 
knowledge of Database Manage- 
ment Systems; Calculate optimum 
values for Oracle database 
parameters. performanc tune 
Oracle databases; Mode! Or. 
database security; manage 
backup and recovery o' f Oracle 
databases; make changes 
Oracie database applicati 
using expertise in Oracle database 
administration which includes 
logical design, physical design 
performance tuning, backup and 
recovery, coding of scripts 
knowledge of Oracle 7.3, SQL 
“DBA, Pro °C (tools) and PL/SQL 
(Language). Requirements 
Bachelor's Degree in Computer 
Science or related field and five 
years experience as a software 
engineer or database administra 
tor, expertise in Oracle database 
administration which includes 
logical design, physical design 
performance tuning, backup and 
recovery, coding of scripts. 
knowledge of Oracie 7.3, SQL 
“DBA, Pro *C (tools) and 
a SQL (Language). Saiary 

$72,000/year. Working Conditions 
8:00 A.M. to 5:00 PM., 40 
hours/week, involves extensive 
travel and relocation. Apply: Mr. 
Anthony Gebicki, Westmoreland 
County CareerLink, 300 East 
Hillis Street, Youngwood, PA 
15697-1808 Job No 
WEB150872 


oper. system 
Jesign specs 
r nit testin g & integration 
testing for functionality & limits 
Perform t fication, release 
support for 
Provide 
ort as necessary 
issues og es 

Inte 


Eng 


yrs. Exp. as a 
Software Eng. will accept any 
mt 


yrs. exp. performing 

gration testing & 

& 2 yrs. exp 

and C++ on a UNIX 

oper. system. EOE. 40 hrs./wk 
2 (no 

) Datatrac 

200 Hannover Park 

), Atlanta, GA 30350 

have legal auth. to work in 


sultant - develop. 
software 
7 information 
systems. Configuration of SAP 
modules 
reports & programs. Creation of 
new database applications & 
database performance tuning & 
ptimization. Technical environ 
ment: SAP; ABAP/4; UNIX 
Windows NT; Oracle; Informix 
MS in Comp. Sci.* + 1 yr exp in 
job offered or as SAP Consultant 
req'd. (“MS Nngineering 
field + in software 
development acceptable in lieu 
of MS in Comp. Sci.) Previous 
exp must include: UNIX, Oracle. 
oe Must be willing to relocate 
us unanticipated 
worksites throughout US approx 
every 6 mos. 40 hrs/wk, 9am 
5pm, $80,000/yr. Apply at the 
Texas Workforce Commission 
Houston, Texas, or send resume 
Trinity, Room 
424T, Austin, Texas 78701 
JO#TX1101906. Ad paid by 
Equal Opportunity Employer 


Development of 


INFORMATION 
TECHNOLOGY 
pechcbarep rags 
J f ateg 
singly dependent 


quire ts described below 


Senior = Specie Analyst witt 


The Gillette Company is an equal employment opportunity employer. 




















Director, Infrastructure - Phelps 
is seeking a Director. 
scture for its Global 

ers in Miami, Florida 
verall IT infra 

& Cable group. 
operations. 


and LAN.» Atleast 5 years 


reparation & 1 

T budget w/in manufac 

company environment 

mmensurate with 

turn for your 

| abilities, we offer an 

compensation and 

is package. For immediate 

please send or 

a cover letter along with your 

sume and salary history to 

s Dodge Wire & Cable 

Attr on Powell 

Human Resources, 806 Douglas 

Road, Suite 800, Coral Gables 

FL 33134, No phone calis please. 
Equal Opportunity Employer. 


Consultant. Convert and re 
engineer software applications 
on IBM mainframe and 
client/server, including Year 2000 
and Euro-currency conversions 
Analyze existing applications 
Perform coding and testing 
Deveiop Year 2000 conversion 
tools. Tools: COBOL; CICS 
VSAM; TSO/ISPF; DB2; JCL 
Visual Basic; Access. Bachelors 
degree in Computer Science* + 
lyear experience in job offered 
or as a Software Developer 
required. Prior experience must 
include: developing Year 2000 
conversion tools; COBOL; Visual 
Basic. (* In lieu of computer 
science, will accept degree in 
any engineering field). 40hrs/wk 
9am-5pm. $50,000/yr. Applicants 
must show proof of legal authority 
to work in the US. Send 2 copies 
of resume & cover letter to Illinois 
Dept. of Employment Security, 
401 S. State St.-7 North, Chicago, 
IL 60605. Attn: Brenda Kelly 
Ref# V-IL-24597-K. Employer 
Paid Ad. No calls. 


E-DOCUMENT / E-BUSINESS POSITIONS 
170 SYSTEMS, Inc.,a leading edge software pr 


y 
described below 


SOFTWARE ENGINEER AND 
POSITIONS 


Software es Aaparnens mid (antens Levels) 
Oracle PL/SQL 4 Ora applice 

Starting salaries rar 

with five weeks paid time 


ly competitive benefits package. 


Please send r 


wit 








Pegasus Cc 
pre 9 Ana 


ig Group, Inc 


grammers. DBAS 


ABAP/4 Cobc 
Basic, VBA,C 


DBA- Oracle arver, Sybase, [ 
Active X, COM, DCO XCOM + CORBA, HT 
JAVA, BROADVISIC 


ebel Admin, UNIX NT Adi 


nities also available for Ma 
Technical Recruiters .A degree are required 
foreign equivalent of the required education 
education and experience. Persons intere: 
resumes with ref.# PCGI to Pegas 
Resources, and Attn: Dan Pacelli 
Woodbridge Dr.#200, Woodbridge, NJ 


Full time oppo 


Pegasus Co 























Programmer (Atlanta, GA) 


Design, develop computer 
system & programs on mid-range 
Pro*C 


SQL & Oracle Database. Also 


UNIX platform using C. 


design, implement & develop 
new features & functionality for 
products & services. Req. BS in 
CS plus 6 mon. exp. w/ SQL 
Oracle Database & C. Resume 
to: Sr. Director, Kathy Beatty, 
1525 Windward 
Alpharetta, GA 


Equifax, Inc 
Concourse 
30005 








SR.SAP PROGRAMMER  - W. 
R. Grace & Co. is seeking 
a Senior SAP Programmer 
Analyst at its facilities ir 
Columbia, Maryland, to configure 
SAP software and develop solu- 
tions using SAP ABAP/4 and 
Oracle programs. BSc. & 
extensive Systems Analyst 
w/SAP experience req'd. Salary 
commensurate with experience 
When applying for this position 
please forward resume to W. R 
Grace & Co., Attn: April Mason 
Manager, Int'l Assignments 
7500 Grace Drive, Columbia 
Maryland 21044 








SOFTWARE ENGINEER 


Software engineer to design 
develop and test computer 
programs for business applica- 
tions; analyze software require: 
ments to determine feasibility of 
design; direct software system 
testing procedures using expertise 
n Java, JavaScript, C++ and 
Informix. Requirements: Bachelor's 
Degree or equivalent in Computer 
Science or related field and two 
years experience as a software 
engineer or computer programmer, 
knowledge of Java, JavaScript. 
and Informix. Salary 
000/year. Working Conditions 
8:00 AM. to 5:00 PM. 40 
hours/week, involves extensive 
travel and frequent relocation 
Apply: Ms. Sue oe 
Fayette County Team 
Careerlink, 32 lowa Guest 
Uniontown, PA 15401, Job No 
WEB150856 








Consultant. Design, develop 
implement & test software for 
management information 
systems. Administration of SAP 
modules. Development of 
reports & programs. Creation of 
new database applications 
& database reorganization 
Technical environment: SAP 
BASIS; ABAP/4; UNIX scripts 
Oracle. MS in Comp. Sci.* + 1 yr 
exp in job offered or as Systems 
Analyst req'd ("MS in any 
engineering field + 1 yr exp in 
software development acceptable 
in lieu of MS in Comp. Sci.) 
Previous exp must include 
UNIX, Oracle, SAP. Must be 
willing to relocate to various 
unanticipated worksites through- 
out US approx. every 6 mos. 40 
hrs/wk, 9am-5pm, $80,000/yr. 
Apply at the Texas Workforce 
Commission, Houston, Texas, or 
send resume to 1117 Trinity, 
Room 424T, Austin, Texas 
78701, JO#TX1101910. Ad paid 
by an Equal Opportunity 
Employer 


Manager, Business elligence. Du 
design & develop client tech. proposals 

Riean for project mgmt., change & qua 

tools & other automated testing software 

& leadership in designing data 

utilizing Oracle RDBMS, Oracle Ex 

Oracie Web DB, Mic soft SQL Server, Hyp 

Holos & Cryst ts, Microstrategy DSS. + HT! 
Microsoft Site Server Ce ommerc 

Server. Manage projects using 

databases using Oracle Express Tools & set 

Build, lead & manage teams to meet goals & deadiin 
consultants for div. Requires: 8 yrs. e 

as a Mgr., Sr. Consultant or C 

obtained concurrently, must inc 

goals & deadlines 
using Oracle Express 
Send resume (no calls) 
Peachtree St.. Suite 800 
work in U.S 


yn budget 
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in Financial Services 


Just as the InfoWorld Test Center has shifted away from reviewing boxes and tools to technology in general, so too has the world of financial services 
information technology. The technology is what brings the expertise of brokers, bankers and analysts to their customers, as well as sharing knowl- 
edge throughout these firms. The result is that most financial services firms are looking for people with experience in large-scale implementation — 
identifying how varied technologies can work together behind the scenes of what web-enabled technology is providing to customers and suppliers. 


Kemper Technology Services — Long Grove, IL 


Jack Scott, president of Kemper Technology Services, has 
been working the financial services/technology angle for 
more than three decades.““One of our key challenges 
for the future is how to distribute ourselves and our 
knowledge to match our user community, and that 
takes on a number of dimensions,” says Scott. 


The result is a need for technology employees who 
have deep technical skills and who can work closely 
with the distributed business activity. “To respond to 
this environment, we have a dual path for technolo- 
gists — one that is linked more closely to the business 
and the other as senior level, deep technologists,” 
Scott explains. “This dual track recognizes the increas- 
ing complexity of the systems we're developing.” 


The deep technology positions are mainly available 
in Long Grove. “These positions range from entry- 
level to senior architects, application architects and 
project managers. We also have positions available in 
Jacksonville and Jersey City. These positions will con- 
sist of developers and business analysts and will 
assist us in aligning more closely with business 
offices across the country,” says Scott 


Kemper currently is retooling systems for web 
delivery to include new business management tools, 
large-volume delivery capability and data manage- 
ment. Web sphere and Java are being used as the 
basis for much of the development. “The data man- 
agement aspect includes incorporating different data 
models and implementation of middleware that will 
provide access and consistency across a heteroge- 
neous environment,” Scott says 


“Kemper Technology Services provides diversity of 
work for employees and includes a commitment to 
technology. We also offer excellent benefits and an 
IT-focused employee development program,” says 
Scott. “Kemper is an organization with an exception- 
al reputation and a long history of success in a 


stable environment.” 
OpenLink Financial, Inc. — Mitchel Field, NY 


When financial services and energy marketers look 
for technology, they often turn to OpenLink, one of 


Computerworld * InfoWorld * Network World = 


the industry leaders in trading and risk management 
systems. “Our software handles the entire trade life- 
cycle management process,” explains Diane 
Montaruli, vice president of human resources. “It 
offers extensive cross market capabilities, and pro- 
vides our customers with a flexible, scalable and 
best-of-fit solution.” 


OpenLink’s lead products are Endur for energy 
markets, and Findur for financial markets. With a 
diverse set of top-tier clients worldwide, OpenLink 
services mega utilities, energy marketers, central 
banks, settlement banks and trading houses. “Our 
clients represent the top of the spectrum in each of 
the markets we serve and include such names as 
Dynegy, KeyCorp, Coral and Bank for International 
Settlements,” says Montaruli 


OpenLink's corporate headquarters is located in 
Mitchel Field, just outside New York City, and has 
regional offices in Houston, Texas and London 
Project management, client support and technical 
development positions are available at all three 
locations. The business is seeking IT professionals 
with C/C++ language experience, Java, Web Logic, 
EJB and database skills. “Ideally, we are seeking em- 
ployees who have a balance of technical and 
marketplace experience,” says Montaruli. “That's 
important for our product development and for the 
clients we support.” 


“Here you'll be a software developer for the mar- 
kets you hear about every day in the news — 
energy, commodities, foreign exchanges, derivatives. 
You will be at the pulse of what is going on in the 
world today, as our clients are constantly pushing 
us to be on the leading edge,” adds Montaruli. 
“We're a stable company whose aggressive growth 
has been based on sales, not projections.” 


PricewaterhouseCoopers — New York, NY 


PricewaterhouseCoopers Technical Consulting 
Group performs two key functions for the financial 
services industry. First, it web enables internal and 
external relationships through technology. “For 
instance, financial firms may be looking for informa- 
tion and data to provide to customers and to share 
throughout the firm,” says Nicholas Tsororos, 


February 


associate director of recruiting for emerging and 
integrated technology efforts. ‘We create the 
underlying architecture that makes this possible.” 


Then, PricewaterhouseCoopers’ team ties informa- 
tion, customers and employees back together 
through customer relationship management, ERP, 
human capital, technology management, and data 
warehousing systems to help customers gain full 
advantage of the systems they have in place. “We 
provide these capabilities to most of the major 
financial services — insurance, investment, capital 
management, commercial banking and brokerage 
firms," adds Tsororos. 


“The combination of skills needed today do differ 
from what we needed just a year ago,” Tsororos 
says. “We need people with experience in building 
systems, who have dealt with the end-users and 
been there and done that on some of the large- 
scale systems and new technologies — and know 
how to tie it all together”” While many of the 
PricewaterhouseCoopers projects are based on 
UNIX, the IT teams also work with most of the 
major platforms. “We need strong knowledge of 
technology and business and people who can 
lead small or large endeavors while also doing 
the tasks.” 


In addition to a full-scale employee development 
process and online education, Pricewaterhouse- 
Coopers assigns a coach for every employee. The 
idea is to help employees with their current assign- 
ments, but also to develop skills and experiences 
needed to gravitate their careers and the service 
the firm provides to clients.““We have a framework 
that allows you to work in any of six areas or a 
multitude of the six,” says Tsororos. “| usually advise 
people to work in two or three at least to provide 
some balance.” 





For more job opportunities with financial services firms, 
turn to the pages of ITcareers. 

* If you'd like to take part in an upcoming |Tcareers 
feature, contact Janis Crowley, 650.312.0607 or 
janis_crowley@itcareers.net. 

* Produced by Carole R. Hedden 

* Designed by Kevin M. Thomas 
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( Exceed all expectations. At Kemper 
Technology Services, a division of 
Kemper Insurance, the technology that 
drives our company is driven by ideas 
That's why we invest in the people 
behind the technology. If you're ready 
to make an impact, you're ready for 
success at Kemper. Consider the 
following opportunities 


© Resource Manager 


® Technical Documentation 


former MVS/ 


Cobol Programmer 


© EA! Developers 


Java, interface design 


Data Modeler 


Erwin, insurance experience 

Document Management 

DocuMaker, Infoprint Manager 
Telecom/Data Analysts (PBX, Nortel) 
Architects (Java, C++, UML, component 


development 
E-Commerce 


Vitria) 
Security Analysts & 


Developers (Java, LDAP) 

Quality Assurance Analysts 
(methodologies, Rational Test Suite) 
Business Systems Analysts (full life cycle 


development 


OS/390) 


development 


DB2, VSAM) 


methodology 


VB, C/C++) 


Sr. Systems Programmers (CICS, MVS 


Configuration Management Support 
(PVCS, NT, UNIX) 
Unit Manager (PC GUI Apps 


DB2, VB, C/C++, Notes) 


Sr. Application Analyst (VB 
6.0/SQUC/C+) 


© Programmer Analysts (Cobol, CICS 


Sr. Project Managers (full life cycle 


exp.) 


$8 ofall 





Nsion plan 


public course 
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iti also a 
Jacksonville, FL and 
Jersey City, NJ. 


Our benefits package includes profit 
sharing and a company sponsor 


Additionally, our campus 


in beautiful Long Grove offers an on 
site day care facility, notions store 
fitness center and Kemper Lakes golf 
course, an 18-hole championship 


EOE 


Please forward your resume fo 
isresumes@kemperinsurance.com 


Kemper 


Insurance Companies 


INSURANCE FOR TODAY’S WORLD. 


ji com 
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Faculty Positions 


St. Thomas 
GRADUATE PROGRAMS IN 
SOFTWARE, IT & IS 
Minnesota's largest independent 
university invites applicants for 
tenure track positions in Graduate 
Programs in Software, IT & IS for 
fall 2001. Qualifications: Ph.D. or 
Masters with intent to obtain 
doctoral degree; expertise or 
knowledge in any of the following 
bject oriented systems using 
JAVA; computer architecture 
wireless computing and commu 

fistributed computing 
communications anc 

3: parallel processing 
architectures of software systems 


comme technologica 
infrastructure; microprocessors 
software engineering; project 
and testing; operating 
systems analysis & 
enterprise applicatior 

n and/or 


a plus 


Software Design and Develo 
ment, a Master of Science in 
ware Engineering and a 
ters in Software Systems, as 

as graduate certificate 
and professional 
Jevelopment seminars. We offer 
a competitive salary and benefit 
package including generous 
retirement benefits and tuitior 
remission. Submit cover letter 
refer to #200102), resume anc 
references to: Dr. Bernice Folz 
Director, Graduate Programs ir 
clo HR Dept 

AQU#217, 2115 Summit Ave. 
St. Paul, MN 55105. Visit 
www.stthomas.edu for more infc 
about UST. Application materials 
reviewed until positions are filled 

EOE 


Software Engineer sought 
by window covering 
importer in Cerritos, CA for 
company MIS _— system 
Resume to H.R. Dept 
Custom Craft Co., 13707 
Cerritos, CA 


Midway St 


90703 








ymputer Profes 


an Lab € 
least 10 openings for 
technician analysts 


programr 


systems 
both entry and 
senior leve andidates witt 
following skills are plus all & 
maintain network operating 
systems, database applic 
MSOffice, NT 4.0 
Degrees preferred but 
necessary. Send resume 
3176 Pullman St., Ste 115 
Masa, CA 92648. EOE 


Costa 














Programmer Analyst. Develop a 
Client-server application in Oracle 
7.1 and Developer 2000, with 
analysis and design in Oracle 
data modeling tool Designer 
2000. Perform programming in 
Developer 2000 (Forms 4.5 and 
Reports 2.5), PL/SQL, Pro *C 
and Unix shell scripts. 40 hrs/wk 
8:00 am to 5:00 pm; $64,600/yr 
Master's degree in C.S. or Elect 
Eng’g req'd, as is 1 yr exp. in job 
offered or a prog. analyst posi 
tion. Prior exp. must include exp. 
in Oracle 7.1 or higher. Frequent 
reassignments to client sites in 
various locations throughout US 
Apply at the Texas Workforce 
Commission, Austin, TX, or send 
resume to Texas Workforce 
Commission 

424T, Austin, TX 78701 
TX1180358 


Computer Programmer sought 
by company who design and 
program internet applications for 
e-business located in Santa Fe 
Springs, CA. Must have Masters 
Degree in Computer Science 
Send resume to: HR Director 
(REF: JB 01106) e21 Corporation 
10012 Norwalk Bivd #120, Santa 


Fe Springs, CA 90607 


We're the world leader in helping 
customers and companies stay 
connected. Over the phone, on 
the Web, by fax. Our customer 
relationship solutions enable 
businesses to interact with their 
customers on a personal basis 
And that makes a difference 


ACS Consultant/Software 
Engineer 
The Developer Consultant 
provides services and technica 
support to clients through soft 
ware applica 
Responsible for analysis, design 
and integration 
r 2 application 
solutions. Requirements include 
an MS 
Science/Information Systems 
MBA or BS in these disciplines 


development 


Engineer/Computer 


plus 5 years of experience 
Experience 

; including 

and Sybase 

ith knowledge of C 
SUE client/server 
Win35/38/2000, and/or NT, and 
and/or UNIX. Knowledge of at 
least one network operating 
system (Nove AN Manager 


AN ver, Banyon Pines) 


ua Basic 


necessary locations are 
througho US 


Aspect offers outstanding career 
pportunities and a_ highly 
competitive compensation/ben 
efits package. To forward your 
resume (referencing Job code 
ACS001/RIR/INFOW) 
e-mail: staffing@aspect.cor 
fax: (408) 325-2942: or mail 
Aspect Communications, Attn 
Staffing Department, 1310 Ridder 
Park Drive, San Jose, C 
EOE/AAE. www.aspect 


PROGRESS DATABASE 
ADMINISTRATORS 


Resp for creating, supporting & 
managing Progress Database 
installing, upgrading & maintaining 
Progress. Webspeed, Mfg/Pro 
and Q-ling applic’s 


configuration; system security. 


system 


Req's Master's deg in Ind’! Eng’g 
field, Comp Sci. or foreign equiv 
OR Bach deg in 


Comp Sci & 3-5 yrs exp. 


Ind’! Eng’g or 


w/Progress and Mfg/Pro. Send 
resume to Maria Martinez 
Johnson Controls, Inc, One 


Prince Ctr, Holland, Ml 49423. 








Network Administrator 


wanted by Diamond 
Wholesaler in Chicago, IL 
Must have Bachelor's Degree 
in Comp. Sci. Respond to 
International Diamond & 
Jewelry Corporation, 29 
East Madison 


Street, 


Chicago, IL 60602 





























SOMPUTER CONSULTANT 
required by Softw 
Company in Au: 
and develop web front end specs 
and requirements. Generate and 
design functional specifica 
Recommend and leverag 
party technologies and devel 
and deliver company’s service 
Use database schemes & desic 
TCP/IP & Corba, Java & 
C++, and HTML to perform duties. 
Must have Master's degree ir 
Computer Science & 3 yrs. ex 
or 3 yrs. ex \ cCupation 
involving duties similar to offered 
position. in lieu of Master's 
accept Bachelor's 
Science 


or 5 yrs. exp. in duties similar t 
offered position. Respond to: Mr 
Pierre Bogaez 

Talenthill, 1101 Capital of Texas 
Highway South, Suite H-200. 
Austin, TX 78746. Fax: 512-306. 
0507 








IT Professionals 


Entergy, one of America’s largest 
utility companies, has multipie 
the following 


sitiple 


* Information Technology 
Professionals 

* Systems Analysts 

* Computer Programmers 

* Software Engineers 


For immediate consideration 
please forward your resume and 
salary requirements to: Entergy 
Corporation and operating 
subsidiaries, Attn: Ms. Lori 
Hendler, HR Department, PO 
Box 61000 New Orleans, LA 
70161. Phone: 504-576-4117 
EOE/M/F/D/V Principals only. 
You will only be contacted if you 
are considered for an interview 





Computer Professionals 


Soft O Soft and AdvanSoft are 
sister companies. We have 
ple openings for entry and 
experienced Programmer/System 
Analysts, Software/Project 
Engineers, DBA. We offer very 
attractive salary with full benefits. 
with any of the 
following skills preferred: Visual 
Basic, Unix, SQL/SOQL Server 
GUI, DB2, CICS, COBOL 
C/C++, Oracle or Sybase. Req 
MS or BS with exp. Send 
resumes to: Soft O Soft Inc. 631 
Route 83, Suite 307 
Bensenville, IL 60106 or visit 
www.softosoft.com 





Channe! Sales Representative 
wanted by Massachusetts-based 
Software Development & 
Consulting Co. for its San 
Ramon, CA office. Must have 
Bachelor's degree in Computer 
Science, MIS or related field, as 
well as 1 year of technical sales 
experience. Respond to: Jot 
Code #5249, HR Dept, Cognos 
Corporation, € 


7 South Bedford 


St, Burlington, MA 01803. 

















,™ 
4 


Software Jobs (Consultants) 


Various places in US. SW Engr 
Prog/Anlyst, DBA, User Supp 
Supv etc. Pay DOE. Send copy 

+ resume w/salary reqs. 
job interests to Geosoft 


Infotek, CA 94015 or email 


geolog @ mindspring.com 





Software 
Engineers and 
Other information 
Technology 
Professionals 


Employee-owned Science 
Applications International 
Corporation (SAIC), a 
Fortune 50 pany 

ner commer 
s. SAIC and it 


lianes have | 


over 


ngs at various U.S 
ations for SOFTWARE 
ENGINEERS AND 
OTHER INFORMATION 
TECHNOLOGY 
PROFESSIONALS 
SAIC offers a competitis 
iprehensi 
Qualified 
se torward 
equi ts to: SAIC, 
Human Resources, REF: 
PT, 1450 Poydras Street, 
Suite 670, New Orleans, LA 
70112; Fax: (800) 650-3562. 
ultural 


y in the workplace 
Scrence Applications Internationa! Corporation 


rr 
Www.Salic.com 








Software Engineer wanted 


in Houston, TX. Respond to: 


9430 


HR Dept., KKL, Inc 


Harwin Dr Ste #L-P, 


Houston, TX 77036 

















A iavi-)<-re Mi o)’mancelc-malieiare Manl-lal-(e|[-16> 
than any IT space in the world. 


IT) careers 





TBC, Inc. seeks Programmer. 
Analysts available to relocate to 
various unanticipated worksites 


across the United States 


Send résumé's to Fritz Smith at 


fritz @ itbcusa.com, or mail to: 


ITBC, Inc 
17752 Preston Road, Suite 202 


Dallas, TX 75252 


Software Consulting: Various 
places in US. SW Engr 
Prog/Anlyst, DB Devp & Admin, 
Tech Supp, Syst & Ntwrk Admin 
MIS, etc. Req MS/BS + exp 
Exint pay & benes. Send copy of 
this ad + your resume to Dir 
Recrmnt, CompuWizards, 1301 
Ygnacio Valley Rd., 101 Walnut 


Creek, CA 94598 or visit us at 











www.compuwizardsusa.com 


Programmer/Analyst: Develop 
and produce source code 
required in the operation of 
company's CADWorx software 
products used in the design and 
drafting of piping and instrumen- 
tation in the power and process 
industries using C++, AutoCAD 
and Database programming 
Provide support for CADWorx 
software products. BS in Comp 
Sci, Comp Engg, or Engg Tech & 
6 mos. exp. Send resume: HR 
Dept., Coade, Inc., 12777 Jones 
Rd., Suite 480, Houston, TX 
77070. 








IT careers and 

IT careers.com 
reach more than 
2/3 of all US IT 
workers every 
week. If you 
need to hire top 
talent, start by 
hiring us. 


Call your 

IT careers Sales 
Representative or 
Janis Crowley at 
1-800-762-2977. 


ITCAREERS 


where the best 
get better 


IT careers.com 








You c 
finda 
Wastan 

ie); 

with one 

Webaremeree 
behind 

your back. 


Just point your 
mouse to the 
world’s best 


IT careers site. 


Brought to 
you by 
Computerworld, 
InfoWorld and 
Network World. 


Find out more 
Call your 
ITcareers Sales 
Representativ e 
or Janis Crowley 


1-800-762-2977 
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NEWS” 


Spread of Kournikova 
Highlights Securit 


Unscathed users describe preventive 
measures taken to filter out worm 


BY JENNIFER DISABATINO 
ECURITY SOFTWARE 
vendors and other 
experts are warning 
users of the dire con- 
sequences of viruses, 

such as the worm disguised as 

a photo of Russian tennis star 

Anna Kournikova that 

launched last week. 

Servers across corporate 
America were bombarded with 
the Visual Basic Script (VBS) 
worm built from a crude tool 
kit. That the worm spread as 
swiftly as it did shows that 
companies have a long way to 
go to improve lax security in 
their infrastructure and among 
their users, said observers. 

“IT didn’t see anything new 
about this one. People should 
have had filters in place to pre- 
vent this,” said Mark Amos, 
manager of information secu- 
rity at Owens Corning in Tole- 
do, Ohio. 

The worm, which did no 
damage, was allegedly written 
by a 20-year-old Dutch man 
who turned himself in to po- 
lice. In a statement to authori- 
ties, the suspect said he “made 
a virus to prove how simple it 
was to make [one] and how 
vulnerable computers are.” 


A Patch Does Exist 


Once the attachment 
opened, the worm worked its 
way through the address books 
of Microsoft Outlook users. 
Yet, eight months ago. Mi- 
crosoft Corp. put out a patch 
for its Outlook e-mail software 
in response to similar prob- 
lems with the “I Love You” 
virus. That patch would have 
prevented users from being in- 
fected with the Kournikova 
worm, said Vincent Gullotto, 
the director of McAfee.com 
Corp.s McAfee Anti-Virus 
Emergency Response Team 
laboratory in Beaverton, Ore. 


was 


was 


While hardest hit 
aren't talking about the virus 
and its damage to their corpo- 
rate systems, a few security 
managers have shared their ex- 
periences with the Kournikova 
worm, or VBS/SST. 

Paul L. Schmehl, supervisor 
of support services at the Uni- 
versity of Texas at Dallas, said 
constant education of his 
staffers has led them to a point 
where he trusts them to recog- 
nize the potential threat in un- 
solicited attachments. 


those 


Continued from page 1 


Server Probes 


in the Berkeley Internet Name 
Domain (BIND) server from 
the Redwood City, Calif.-based 
Internet Software Consortium. 
In fact, many companies 
don’t even know they are being 
scanned or if their networks 
have been compromised, secu- 
rity specialists said. 
Meanwhile, other experts 
warned that hackers with track 
records of developing sophisti- 
cated automated hacking tools 
are already planning to cross- 
breed Internet worms, such as 
the recent Ramen worm, with 
other DNS exploits, thus creat- 
ing the potential for wide- 
spread network problems. 
“There are a couple of 
worms on the horizon that will 


probably be the next breaking | 
story,” said Amit Yoran, CEO of | 


Riptech Inc., a network securi- 
ty firm in Alexandria, Va. “In 
literally a matter of hours, a 
very large number of zombie 
hosts can be created for 
planned [distributed denial-of- 
service] attacks, multiple hop- 
ping points to cover 
tracks and other activities.” 

IT managers across the na- 


“Our experience has shown 
that our users do use sound 
judgment regarding attach- 
ments,” he said. “However, the 
onslaught of viruses that use 
stealth, encryption, multiple 
attachment file names, subject 
lines and body text makes it 
more hassle than it’s worth to 
keep our users informed of the 
details of every virus. So we 
now bounce them at the gate- 
way mail server, and they nev- 
er enter our environment.” 

Among other things, Schmehl 
filters vbs files. Amos said he 
deploys similar multiple lines 


| of defense at Owens Corning, 


and that infection 


this time. 


prevented 


tion also are reporting rise in 
DNS-related probes, with many 
attributing the increase to the 
Jan. 29 public announcement of 
vulnerabilities in BIND. 

Keith Morgan, a network se- 
curity specialist at Terradon 
Communications Group LLC, a 
Nitro, W.Va.-based Internet 
software developer for Fortune 
500 firms, said his company has 
detected more than 15,000 indi- 
vidual probes for vulnerabili- 
ties on its networks since Octo- 
ber. But the scans recently shift- 
ed from those looking for vul- 
nerable file transfer protocol 
servers to Port 53, where DNS 
resolution queries are handled 
in older versions of BIND. 

“Our remote sites and VPN 


Owens Corning uses several 
layers of security that keep end 
users from even seeing an at- 
tachment, Amos said. The com- 
pany uses a filter service out- 
side the firewall, antivirus soft- 
ware at the firewall, filters in- 
ternally between servers and 
on the antivirus software on the 
desktops. Users, with some ex 
ceptions, can’t receive attach- 
ments, said Amos. “We didn’t 
have any problem,” he said. 

Blocking suspect attach- 
ments is no silver bullet either, 
said Matthew Pemble, a con- 
sultant at the Preston Technol- 
ogy Management Centre in 
England, since files can be 
saved with any extension. 


users connecting over both 
dial-up and broadband tech- 
nologies are also reporting ma- 
jor increases in scans for DNS 
servers,” said Morgan. 

Sean Brown, a systems ad- 
ministrator at Applied Geo- 
graphics Inc., a geographic in- 
formation system consulting 
firm in Boston, said he has 
seen a small rise in scans since 
Jan. 30. But the impact of those 
scans can be significant, he 
said. “I had only seen one Class 
C sweep for DNS in January 
before the announcement,” 
said Brown, referring to a net- 
work that contains 256 IP ad- 
dresses. “I’ve since seen four.” 

Although that may not seem 
like a lot, each scan is probably 





your | 


DNS Probes on the Rise 


Recent network security statistics: 


# Attempts to breach online security mechanisms rose 
58% in January, to 5,568, from 3,534 last December. 


® Attempts to find vulnerable servers increased 280% 


to approximately 6,000. 


@ Stealth scans are the most common type of malicious 
activity and increased 88% to 3,102. 


8 Backdoor-G and NetBus Trojan scans have increased 
in number, while Hack-a-Tack and Back Orifice 
have decreased and appear to be out of favor. 


B 





[just THE FacTS._| 


Watch for 
Traffic 


You’re bound to get hit once in 
a while, but there are a few 
things you can do to minimize 
the damage: 


“This is not to say that 
blocking by extension is bad — 
it is a massive damage limiter 
— just that it is not enough,” 
Pemble said. “Scan everything 
at the 
thing at the desktop [prefer- 
ably using different tools.] 
And then expect to get hit 
once in a while, anyway.” D 


gateway, scan every- 


looking at an entire network of 
anywhere from 256 IP address- 
es up to 65,536, said Brown. 
“The number of potentially 
vulnerable systems is huge.” 

Companies belonging to the 
Information Systems Security 
Association (ISSA), an Oak 
Creek, Wis.-based nonprofit 
group, are also reporting an in- 
crease in BIND-related scans, 
according to an ISSA member 
who requested anonymity. 

In addition, a spokesman for 
the CERT Coordination Cen- 
ter at Carnegie Mellon Univer- 
sity in Pittsburgh confirmed 
that there has been a signifi- 
cant increase in the number of 
BIND-related scans. 

Still, the cross-breeding of 
viruses and Internet worms to 
exploit security gaps in BIND 
represents a major shift in the 
way virus writers operate, said 
Chris Klaus, chief technology 
officer at Internet Security 
Systems Inc. in Atlanta. 

“Now we're seeing an in- 
crease in the number of virus 
writers using the hacker men- 
tality,” Klaus said. Viruses are 
being designed that automati- 
cally search out compromised 
systems, he said. “If compa- 
nies haven’t thought of a way 
to routinely check their ma- 
chines, they’re sitting ducks.” D 
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The 85% Solution 


S 85% ENOUGH? Oracle Chairman Larry Ellison thinks so. At 
last week’s Oracle AppsWorld conference in Paris, he told the 
crowd his company’s E-Business Suite “doesn’t do everything 
our customers want. We have an 80% or 85% solution.” Like 
any enterprise system, Oracle’s can be customized to a fare- 
thee-well. But if you use it out of the box — as Ellison says General 
Electric is doing at 20 manufacturing plants — “an 85% solution in 
five months is better than a 100% solution in three years.” 
That’s a pretty picture, isn’t it? Bet your CEO will like it, too. And 
that could spell trouble. Because using enterprise software out of 


the box isn’t really about giving up features. It’s | 
about giving up control of how your company 


does business. 


Remember, an enterprise package isn’t just an 
extra-large bundle of features and functionality. 
Inside the package, there’s a model for how a 
company does business — that’s what makes it 


enterprise software. 


All the business processes that the enterprise 


package implements are built on 
top of that model so they'll work 
smoothly together. And that’s 
great — if the business-process 
model inside the software exactly 
matches your business. 

Which, of course, it never does. 

And then you have a choice: 
You can change the software, or 
you can change your business 
processes to match the software. 

We know what it costs to 
change the software. We've all 
seen the projects that dragged on 
for years, customizing enterprise 
packages from SAP and People- 
Soft and Baan and Oracle. Every- 
one underestimated how long 
customization would take, how 
hard it would be and how much 
work had to be done all over 
again with each new release of 
the enterprise package. 

We also know about companies 
that didn’t customize. Their en- 
terprise projects went up in 
months instead of years. Their 
installations were fast and cheap. 
But there were costs that didn’t 


show up in the project budget — the costs of 
endless changes and adjustments and unintend- 
ed consequences from changing their business 
processes to match the way the software works. 


But there’s a more subtle trade-off, too: Get- 
ting a ready-to-use enterprise system means 


handing over the job of designing business 


processes to the software vendor. 

That’s a lot to trust Oracle or SAP or People- 
Soft for. Not just getting the code right, but also 
getting the whole business process right. And 


then keeping it right with each upgrade, as busi- 


It’s about 
who controls 
how your 
company 


does business. 


That’s the obvious trade-off with out-of-the- 


box enterprise software: quick and clean on the 
technical side, messy and disruptive on the 


business side. 


ness and markets and customer expectations 


change. 

And that’s what Larry Ellison 
is really pitching. Not just an 85% 
solution, but 100% trust in the 
vendor’s ability to deliver a 
business model that works — 
and keeps working, pretty much 
forever. 

Is that a good idea? Maybe, 
maybe not. It’s not your call. If 
ever there was a technology- 
related decision that has to be 
made by top management, the 
choice to outsource control of 
business processes has to be it. 

But you can be sure of one 
thing: One of these days, your 
CEO will hear about this dandy 
idea for saving time and money 
by implementing an enterprise 
package without first custom- 
izing it. 

IT’s job then will be to explain 
what’s at stake: not just features 
or convenience or a fat project 
for IT — but also who controls 
how you do business. 

Maybe, like GE, your CEO will 
decide it’s the right approach for 


certain operations. Maybe he’ll conclude it’s too 
much of a gamble. 

Either way, make sure he’s got the full picture 
— not just 85% of it. D 


Hayes, Computerworld’s senior news columnist, has 
covered IT for more than 20 years. Contact himat 


| frank_hayes@computerworld.com. 
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UPGRADE OF NETWORK 
software for 200-plus govern 
ment employees mostly goes 








| smoothly (it probably helps that 
| this pilot fish left a note at each 


workstation explaining what he 
did and why). But one user is fu 
rious in the wake of the upgrade 
User's e-mail message to fish 
“Ever since you worked on my 


| office PC, my home PC hasn't 
| been working right. What did 
you do to it?” 


| ZIP TRIP Network administra- 


tor pilot fish notices that one 


| user has added a Zip drive to his 


PC on his own. Curious, the fish 
asks why. “Yeah, | needed it,” 


| user says, “because | get so 


many e-mail attachments that 
are zipped.” 


| PLEASE RESPOND ASAP 


Consultant's PC is acting up, so 


| just before she goes on vacation, 
| she ships it back to the home of- 
| fice’s IT shop for repair. That 

| means it’s her pilot fish boss 

| who fumes when he receives a 

| copy of an e-mail message to 

| her from the repair guys, asking 
| for her intranet passwords be- 

| fore they can get to work. “The 

| IT group has administrator 

| rights. They have the capability 

| of changing the password,” 

| grumbles the boss. Not to men- 
| tion that they also have her PC. 








WRONG IMAGE Pilot fish stops 
reading a faxed ad at the point 


— . 


where the data warehousing tool 
vendor boasts, “We specialize in 
extracting data from your back 
end and bringing it to your fore- 
front.” 


PLAYING IN TRAFFIC IT pilot 
fish at a financial services com- 
pany gets a heads-up from the 
networking group: One office is 
using so much bandwidth on the 
Internet proxy servers that it's af- 
fecting users sitewide. The net- 
work guys identify the customer 
service rep responsible, and the 
fish trucks down to the call cen- 
ter, where one look at the user's 
desktop reveals the problem. “! 
identified myself,” says the fish, 
“and asked the user how having 
the streaming real-time images 
from four freeway cams could 
have a bearing on the duties of 
his job.” 


TRYING TO KEEP a corporate 
bigwig in the loop, a pilot fish 
e-mails him the skinny on a proj- 
ect that was proposed at a work 
management team meeting. Big- 
wig fires back a single question: 
“Who's on this team?” Fish re- 
strains himself from firing back a 
one-word answer: “You.” 


Fire one over to me: sharky@ 
computerworld.com. You get 
a sharp Shark shirt if your true 
tale of IT life sees print - or if it 
turns up in the daily feed on the 
Web at computerworld.com/ 
sharky. 
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“FRANKLY, I’M NOT SURE THIS 1S THE WAY TO 
ENHANCE CUR COLOR GRAPHICS,” 





E-mail richtennant@theSthwave.com 
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With the explosion of e-commerce, the old rules 
of competition have been thrown out the window. 
To remain even one step ahead today you need 
immediate access to the best data available. And 
software that quickly converts it into knowledge 
you can act on. Which is precisely why 98 of the 
FORTUNE 100 count on SAS, the world leader 
in data mining and e-Intelligence. SAS enables 
you to capture, integrate, explore and analyze 
information from across your entire enterprise. 
To recognize and seize opportunities at the speed 
of the Web. And to make competitive decisions 
with greater confidence than ever before. To learn 
more on how we can propel your organization, 


call |-800-727-0025 or stop by www.sas.com. 


The Power to Know. Sas. 


ees iialivailea 























IBM E-BUSINESS HOSTING™ CAN HELP YOU BECOME A FORMIDABLE FORCE ON 
THE WEB. OUR RAPIDLY SCALABLE AND REDUNDANT NETWORKS ENABLE YOUR 
E-BUSINESS TO GROW — AND GROW FAST — WITHOUT INTERRUPTION. AND WE 
HAVE THE EXPERIENCE OF HOSTING SOME OF THE MOST HEAVILY TRAFFICKED 
E-BUSINESSES IN THE WORLD, INCLUDING VICTORIASSECRET.COM. E-BUSINESS 
HOSTING. ONLY FROM IBM. 


Call 1800 IBM 7080, ask for host or visit ibm.com/e-business/hosting 




















